CVE-2026-47556
nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflow
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2026
Updated · October 17, 2026
Description
A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger an integer overflow in the driver's kernel mode layer, leading to an out-of-bounds memory write. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service (DoS), or tamper with sensitive data.
Statement
This vulnerability is rated as Important because an authenticated local user could leverage integer handling flaws in the kernel module to perform out-of-bounds writes, potentially resulting in elevated privileges or host compromise. Exposure is limited to environments where NVIDIA hardware is deployed and the proprietary kernel-mode driver is loaded. Red Hat Enterprise Linux releases are not affected because the vulnerable code base is not present in supported driver packages.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write