CVE-2026-47572

A flaw was found in the NVIDIA GPU Display Driver for Linux. A local user can trigger a type confusion condition—where the driver misinterprets the structure of an object in memory—within the kernel-mode layer. Successful exploitation could allow an attacker to escalate privileges, execute arbitrary code, cause a denial of service (DoS), or disclose and tamper with sensitive system data.

This vulnerability is classified as Important because a local authenticated user could gain elevated system privileges, manipulate memory, or trigger a full kernel crash, compromising host integrity. The flaw specifically impacts Red Hat Enterprise Linux systems where proprietary NVIDIA GPU display driver modules are installed and actively handling graphics or compute workloads. Exploitation requires direct interaction with the driver's kernel interfaces, so systems without NVIDIA hardware or those running standard open-source display drivers remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA kernel driver from loading if dedicated GPU acceleration or compute functions are not actively required:

1. Create a modprobe configuration file to prevent the module from loading:

echo "install nvidia /bin/true" > /etc/modprobe.d/disable-nvidia.conf

2. If the module is currently loaded, unload it:

modprobe -r nvidia

Warning: A system restart or display manager restart may be required for the change to take full effect. Disabling the driver will terminate GPU-dependent graphical sessions and prevent CUDA or hardware-accelerated compute workloads from functioning.