CVE-2026-47604

A flaw was found in the NVIDIA GPU display driver. Missing authorization checks in the kernel-mode driver allow a local user to access another process's graphics processing unit (GPU) channel state. Successful exploitation can lead to unauthorized information disclosure.

This vulnerability is rated as Moderate because exploitation is restricted to local authenticated users and solely compromises data confidentiality without affecting system integrity or availability. In Red Hat Enterprise Linux environments utilizing the proprietary NVIDIA driver packages, an unprivileged user on the host could inspect GPU state data associated with concurrent workloads. Systems without NVIDIA hardware acceleration or environments where unprivileged users are prevented from running local processes are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the NVIDIA kernel driver module from being loaded on systems where dedicated NVIDIA GPU capabilities are not required:

1. Create a configuration file to disable loading the module:

echo "install nvidia /bin/true" > /etc/modprobe.d/disable-nvidia.conf

Warning: A system reboot is required for this configuration to take effect if the module is already loaded in memory.

Caveats: Applying this configuration disables NVIDIA GPU hardware acceleration, graphical output, and compute workloads on the system.