CVE-2026-47598
published 2026-09-30CVE-2026-47598: NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause…
PriorityP433high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.11%
1.3th percentile
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | virtual_gpu_manager | — | — |
| nvidia | virtual_gpu_manager | — | — |
CVSS provenance
nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free in event delivery path
vendor_redhat·2026-09-30·CVSS 7.0
CVE-2026-47598 [HIGH] CWE-825 nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free in event delivery path
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free in event delivery path
A flaw was found in the NVIDIA GPU Display Driver for Linux. A race condition between asynchronous event delivery and file close operations in the open-source kernel module can lead to a use-after-free condition, where memory is accessed after it has already been released. A local unprivileged attacker could exploit this vulnerability to achieve arbitrary code execution, escalate privileges, or cause a denial of service (DoS).
Package: nvidia-driver (Red Hat Enterprise Linux 10) - Affected
Package: nvidia-driver (Red Hat Enterprise Linux 9) - Affected
GHSA
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between a
ghsa_unreviewed·2026-09-30
CVE-2026-47598 [HIGH] CWE-416 NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between a
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-30
Published