CVE-2026-47554

A flaw was found in nvidia-driver. Under conditions of memory pressure, the kernel mode layer improperly verifies cryptographic signatures, allowing verification checks to be bypassed. A local attacker with low privileges could exploit this vulnerability to tamper with system data or cause a Denial of Service (DoS).

Red Hat has classified this vulnerability as an Important severity flaw because an unprivileged local user could induce memory exhaustion to bypass driver signature validation, resulting in system data manipulation or an operating system denial of service. The flaw is contained at the Important rating rather than Critical because exploitation is restricted to local access with preexisting user privileges and does not allow confidential information disclosure. Red Hat Enterprise Linux releases are not affected, as the vulnerable driver logic is not present in supported package builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.