CVE-2026-47568

A flaw was found in the NVIDIA GPU Display Driver for Linux. A local user can cause a Denial of Service (DoS) by repeatedly calling an interface in the kernel mode layer that emits un-rate-limited error messages. This uncontrolled message generation can flood system logs and exhaust storage or processing resources, resulting in system unresponsiveness.

This vulnerability is rated as Moderate severity because exploitation requires local authenticated access and results strictly in a denial of service, without impacting system confidentiality or integrity. On Red Hat Enterprise Linux environments utilizing NVIDIA GPU hardware, the driver exposes interfaces to local users to handle graphical and compute workloads. An attacker with local access can flood system log facilities by repeatedly invoking interfaces that emit unrestrained error messages, potentially degrading host responsiveness or consuming disk storage allocated for system logs.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA kernel driver module from loading if GPU acceleration is not required:

1. Blacklist the module by creating a configuration file:

echo "blacklist nvidia" >> /etc/modprobe.d/blacklist-nvidia.conf

echo "install nvidia /bin/true" >> /etc/modprobe.d/blacklist-nvidia.conf

Caveats: Disabling this module prevents the NVIDIA GPU display driver from operating, disabling proprietary GPU acceleration and associated display outputs.

Warning: Applying this workaround requires unloading the active module or restarting the system, which will terminate running graphical sessions and GPU workloads.