CVE-2026-47602

A flaw was found in nvidia-driver. A local user can cause the kernel-mode driver to dereference an untrusted pointer, which is an unverified reference to a memory location. A successful exploit can lead to a Denial of Service (DoS) through a system crash or result in unauthorized information disclosure.

This flaw is rated as having an Important impact for Red Hat deployments because, although local access to specialized GPU hardware is required, an unprivileged user can compromise kernel-level confidentiality and availability by crashing the host or reading restricted memory. The proprietary NVIDIA driver is not included in standard default installations and is only present when explicitly deployed for hardware graphics or GPU compute acceleration. Furthermore, Red Hat Enterprise Linux releases are not affected as the packaged driver versions do not contain the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.