CVE-2026-47489
published 2026-09-30CVE-2026-47489: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.13%
2.4th percentile
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | virtual_gpu_manager | — | — |
| nvidia | virtual_gpu_manager | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unpreserved read-only memory permissions
vendor_redhat·2026-09-30·CVSS 7.8
CVE-2026-47489 [HIGH] CWE-281 nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unpreserved read-only memory permissions
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unpreserved read-only memory permissions
A flaw was found in the NVIDIA GPU display driver. The driver's kernel mode layer does not properly preserve permissions on read-only memory. A local user can exploit this vulnerability to achieve privilege escalation or arbitrary code execution. Successful exploitation may also lead to data tampering, information disclosure, or a denial of service (DoS).
Package: nvidia-driver (Red Hat Enterprise Linux 10) - Affected
Package: nvidia-driver (Red Hat Enterprise Linux 9) - Affected
GHSA
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved.
ghsa_unreviewed·2026-09-30
CVE-2026-47489 [HIGH] CWE-281 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-30
Published