CVE-2026-47600
published 2026-09-30CVE-2026-47600: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.13%
2.1th percentile
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | geforce | — | — |
| nvidia | guest_driver | — | — |
| nvidia | guest_driver | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
| nvidia | tesla | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource
vendor_redhat·2026-09-30·CVSS 7.8
CVE-2026-47600 [HIGH] CWE-908 nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource
nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource
A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer improperly handles resources during error processing by operating on uninitialized data. A local user with low privileges could exploit this flaw to achieve arbitrary code execution, escalate privileges, access sensitive data, or cause a Denial of Service (DoS).
Package: nvidia-driver (Red Hat Enterprise Linux 10) - Affected
Package: nvidia-driver (Red Hat Enterprise Linux 9) - Affected
GHSA
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource.
ghsa_unreviewed·2026-09-30
CVE-2026-47600 [HIGH] CWE-908 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource.
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-47600 nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource
bugzilla·2026-09-30·CVSS 7.8
CVE-2026-47600 [HIGH] CVE-2026-47600 nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource
CVE-2026-47600 nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Bugzilla
CVE-2021-47600 kernel: dm btree remove: fix use after free in rebalance_children()
bugzilla·2024-06-20·CVSS 7.8
CVE-2021-47600 [HIGH] CVE-2021-47600 kernel: dm btree remove: fix use after free in rebalance_children()
CVE-2021-47600 kernel: dm btree remove: fix use after free in rebalance_children()
In the Linux kernel, the following vulnerability has been resolved:
dm btree remove: fix use after free in rebalance_children()
The Linux kernel CVE team has assigned CVE-2021-47600 to this issue.
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024061922-CVE-2021-47600-5cc4@gregkh/T
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Via RHSA-2026:65710 https://access.redhat.com/errata/RHSA-2026:65710
2026-09-30
Published