CVE Database›Document archive›CVE-2026-47556

CVE-2026-47556

nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflow

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · October 1, 2026

Updated · October 17, 2026

Description

A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger an integer overflow in the driver's kernel mode layer, leading to an out-of-bounds memory write. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service (DoS), or tamper with sensitive data.

Statement

This vulnerability is rated as Important because an authenticated local user could leverage integer handling flaws in the kernel module to perform out-of-bounds writes, potentially resulting in elevated privileges or host compromise. Exposure is limited to environments where NVIDIA hardware is deployed and the proprietary kernel-mode driver is loaded. Red Hat Enterprise Linux releases are not affected because the vulnerable code base is not present in supported driver packages.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 · Out-of-bounds Write