CVE-2026-47595

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer fails to properly preserve memory permissions, allowing an unprivileged local user to write data to read-only memory. A local attacker could exploit this vulnerability to execute arbitrary code, escalate privileges, cause a denial of service (DoS), or tamper with system data.

This vulnerability is rated as Important severity because an authenticated local attacker with low privileges could exploit improper memory permission handling in the kernel layer to achieve root privilege escalation or arbitrary kernel-level code execution. Standard Red Hat Enterprise Linux installations do not include or load proprietary NVIDIA display driver modules by default; only systems configured with NVIDIA hardware and corresponding driver packages are affected. Exploitation requires existing local shell access on the host to interact with the device interfaces.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability on systems where GPU acceleration or compute functions are not required, prevent the NVIDIA kernel driver module from being loaded:

1. Create a configuration file in /etc/modprobe.d/ to disable loading of the module:

echo "install nvidia /bin/false" > /etc/modprobe.d/blacklist-nvidia.conf

2. If the driver is currently loaded, attempt to remove the module:

modprobe -r nvidia

Caveats: Preventing or removing the NVIDIA kernel module disables all NVIDIA hardware rendering, graphical display output, and GPU compute capabilities. If the driver module is actively held open by graphical desktop sessions or container runtimes, dynamic unloading will fail, and a full system reboot is required to enforce the mitigation.