CVE-2026-47567

A flaw was found in the NVIDIA GPU display driver. A local user with standard privileges can trigger this vulnerability within the kernel mode layer by exhausting the Direct Rendering Manager (DRM) virtual memory area (VMA) offset address space. This uncontrolled resource consumption can lead to a system Denial of Service (DoS).

This vulnerability is rated as Moderate impact because exploitation requires local authenticated access with standard user privileges and only results in a denial of service without compromising system confidentiality or integrity. On Red Hat Enterprise Linux systems utilizing proprietary NVIDIA driver packages, an unauthenticated remote attacker cannot trigger this condition over the network. Local users can deplete available Direct Rendering Manager virtual memory area resources, causing GPU subsystem failures or system unresponsiveness. Systems without NVIDIA hardware or where the driver module is not loaded remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA kernel module from loading:

1. Add the module to the modprobe blacklist configuration:

echo "blacklist nvidia" > /etc/modprobe.d/blacklist-nvidia.conf

echo "install nvidia /bin/false" >> /etc/modprobe.d/blacklist-nvidia.conf

Caveats: Blacklisting the kernel module prevents the NVIDIA GPU from functioning, disabling hardware acceleration, display capabilities through the GPU, and GPU compute capabilities.

Warning: If the driver is already loaded into the running kernel, a system reboot is required for the configuration changes to take effect.