CVE-2026-47501
published 2026-09-30CVE-2026-47501: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched…
PriorityP343high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
3.5th percentile
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | virtual_gpu_manager | — | — |
| nvidia | virtual_gpu_manager | — | — |
| nvidia | virtual_gpu_manager | — | — |
| nvidia | virtual_gpu_manager | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup.
ghsa_unreviewed·2026-09-30
CVE-2026-47501 [HIGH] CWE-787 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Red Hat
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write during event buffer setup
vendor_redhat·2026-09-30·CVSS 7.8
CVE-2026-47501 [HIGH] CWE-787 nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write during event buffer setup
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via out-of-bounds write during event buffer setup
A flaw was found in the NVIDIA GPU Display Driver. A local user can exploit an out-of-bounds write vulnerability in the kernel mode layer by supplying mismatched memory buffers during event buffer setup. Successful exploitation could lead to privilege escalation, arbitrary code execution, denial of service (DoS), information disclosure, or data tampering.
Package: nvidia-driver (Red Hat Enterprise Linux 10) - Affected
Package: nvidia-driver (Red Hat Enterprise Linux 9) - Affected
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-30
Published