CVE-2026-47559

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an issue in the driver's kernel mode layer to access memory belonging to another user's process. A successful exploit could allow an attacker to escalate privileges, execute arbitrary code, tamper with sensitive data, or cause a Denial of Service (DoS).

This vulnerability is rated as an Important impact flaw because an unprivileged local attacker can access cross-process memory in the kernel driver layer, potentially resulting in complete compromise of host confidentiality and integrity through privilege escalation. While exploitation requires existing interactive access or command execution on a host equipped with affected NVIDIA GPU hardware and proprietary drivers, no elevated privileges or user interaction are required to trigger the issue. In shared computing and multi-tenant environments, this boundary violation breaks process isolation and may permit arbitrary code execution in the context of other users or root.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability on systems where proprietary GPU acceleration or compute processing is not required, prevent the NVIDIA kernel driver from loading:

1. Create a modprobe configuration file to disable the module:

# echo "install nvidia /bin/true" > /etc/modprobe.d/disable-nvidia.conf

2. If the driver is currently loaded, unload it:

# modprobe -r nvidia

Warning: Disabling or unloading the NVIDIA kernel driver disables proprietary GPU acceleration, graphical desktop sessions relying on this driver, and CUDA compute workloads. If the module is currently in use, a system reboot is required for this configuration to take effect.