CVE-2026-47583
nvidia-driver: nvidia-driver: Privilege escalation via type confusion in the kernel module
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2026
Updated · October 17, 2026
Description
A flaw was found in the NVIDIA GPU Display Driver kernel module. A local attacker with standard user privileges can exploit a type confusion vulnerability where the driver misinterprets data structures during processing. Successful exploitation could allow the attacker to execute arbitrary code with elevated kernel privileges, compromise sensitive information, or trigger a Denial of Service (DoS).
Statement
This vulnerability is rated as an Important impact due to the potential for local low-privileged users to achieve arbitrary code execution or elevate privileges by triggering type confusion within the driver's kernel module. However, this flaw specifically affects the NVIDIA display driver on Windows platforms and is not present in the Linux drivers distributed or supported across Red Hat Enterprise Linux. Consequently, Red Hat products are not affected by this issue.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')