CVE-2026-47599

A flaw was found in the NVIDIA GPU Display Driver open-source kernel module. An unprivileged local attacker can exploit improper preservation of memory access permissions during Direct Memory Access (DMA) mapping, which controls how the graphics hardware accesses system memory. Successful exploitation could allow the attacker to achieve privilege escalation, execute arbitrary code, expose or modify sensitive data, or cause a denial of service (DoS).

Red Hat rates this vulnerability as Important because an authenticated local user can abuse improper DMA memory permissions to compromise host integrity and obtain elevated privileges. Exploitation requires local access on systems configured with affected NVIDIA graphics hardware and corresponding kernel drivers. Red Hat Enterprise Linux does not ship the vulnerable open-source driver code in default repositories, mitigating the risk across standard platform deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.