CVE-2026-47587

A flaw was found in nvidia-driver. A local unprivileged user can trigger a use-after-free condition in the NVIDIA GPU Display Driver for Linux, allowing them to execute arbitrary code or escalate privileges on the system. Successful exploitation could also result in a Denial of Service (DoS), unauthorized information disclosure, or data tampering.

This vulnerability is rated as having an Important severity because an authenticated local attacker with low privileges could exploit the memory management flaw to gain elevated permissions or execute arbitrary code with kernel-level privileges. While exploitation is bounded to systems equipped with NVIDIA hardware and drivers, successful exploitation compromises complete system confidentiality, integrity, and availability. Environments where unprivileged local users have interactive access to systems utilizing these GPU drivers are primarily at risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.