CVE-2026-47601

A flaw was found in the NVIDIA GPU display driver open-source kernel module. An unprivileged local user can trigger this vulnerability when importing a read-only buffer from another device via the Direct Memory Access Buffer (DMA-BUF) sharing framework, leading to improper preservation of memory access permissions. Successful exploitation can allow a local attacker to achieve privilege escalation, execute arbitrary code, cause a denial of service, or tamper with system data.

Red Hat has evaluated this issue as having an Important security impact because a local, authenticated user can manipulate memory access permissions to gain unauthorized write capabilities, potentially escalating privileges to the kernel level. Red Hat Enterprise Linux releases are not affected by this vulnerability, as the nvidia-driver packages provided in supported repositories do not contain the vulnerable codebase. Consequently, standard Red Hat deployments running official driver packages are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.