CVE-2026-47591
published 2026-09-30CVE-2026-47591: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due…
PriorityP343high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.12%
1.7th percentile
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | virtual_gpu_manager | — | — |
| nvidia | virtual_gpu_manager | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via read-only memory protection bypass
vendor_redhat·2026-09-30·CVSS 7.8
CVE-2026-47591 [HIGH] CWE-266 nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via read-only memory protection bypass
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via read-only memory protection bypass
A flaw was found in the NVIDIA GPU display driver. An incorrect authorization issue in the kernel mode layer allows a local unprivileged user to bypass read-only memory protections and obtain write access to restricted memory. A local attacker could exploit this flaw to escalate privileges, execute arbitrary code, or cause a denial of service (DoS).
Package: nvidia-driver (Red Hat Enterprise Linux 10) - Affected
Package: nvidia-driver (Red Hat Enterprise Linux 9) - Affected
GHSA
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write
ghsa_unreviewed·2026-09-30
CVE-2026-47591 [HIGH] CWE-863 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-30
Published