CVE-2026-47558

A flaw was found in the NVIDIA GPU display driver. An unprivileged local user can exploit this vulnerability by triggering a double-free memory management error—releasing the same memory block twice—within the kernel-mode layer while handling imported memory states. A successful exploit could allow an attacker to escalate privileges, execute arbitrary code, cause a denial of service (DoS) by crashing the system, or access and modify sensitive data.

This flaw is rated as Important severity because an unprivileged local user with access to the GPU device interface can trigger memory corruption within the kernel-mode driver, potentially achieving elevated privileges or compromising the entire host system. Exploitation requires local access on a host with supported NVIDIA hardware and the proprietary driver stack actively loaded. Red Hat Enterprise Linux releases are not affected because the packaged drivers do not include the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.