CVE-2026-47584

A flaw was found in nvidia-driver. An attacker with local access can trigger a NULL pointer dereference (an attempt to access an invalid memory address) within the kernel module. Successful exploitation allows the attacker to cause a system crash, leading to a Denial of Service (DoS).

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires authenticated local access and is limited to causing a denial of service via a system crash, without compromising confidentiality or integrity. Triggering this condition requires specialized NVIDIA GPU hardware and installed driver modules, preventing remote or unprivileged exploitation. Furthermore, upstream advisories indicate that this flaw specifically impacts the NVIDIA GPU Display Driver for Windows, meaning supported Linux installations do not execute the affected Windows driver components.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.