CVE-2026-47562

A flaw was found in the NVIDIA GPU Display Driver for Linux. The driver's kernel mode layer fails to properly sanitize user-supplied version strings, allowing a local user to inject crafted text into the kernel log. A successful exploit can lead to log data tampering and a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because exploitation requires local system access with authenticated user privileges to pass crafted version strings to the kernel driver. While an unprivileged local user could manipulate or flood the kernel log buffer and potentially disrupt automated log monitoring systems, the flaw does not facilitate arbitrary code execution, privilege escalation to root, or unauthorized memory disclosure. The proprietary nvidia-driver package is an optional add-on component utilized primarily on systems equipped with dedicated NVIDIA GPU hardware, and standard installations utilizing default open-source display drivers remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If GPU hardware acceleration or compute capabilities are not required, prevent the NVIDIA kernel module from loading.

Create a configuration file to blacklist the module:

echo "blacklist nvidia" > /etc/modprobe.d/disable-nvidia.conf

echo "install nvidia /bin/true" >> /etc/modprobe.d/disable-nvidia.conf

If the module is already loaded, attempt to unload it:

modprobe -r nvidia

Caveats: Blacklisting the NVIDIA kernel module disables GPU hardware acceleration, which impacts graphical desktop sessions and prevents GPU compute workloads from functioning.

Warning: Unloading the driver module while in use or restarting graphical services will terminate active user sessions. A system restart may be required to ensure dependent kernel modules are fully unloaded.