Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service.
Published: 2026-09-30
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Update When Available
AI Analysis

Impact

The NVIDIA GPU Display Driver for Windows and Linux contains a kernel mode layer flaw that fails to enforce proper access control, which may enable an attacker to cause a denial of service. The weakness, identified as CWE-862, could allow an unauthorized entity to trigger the driver to crash or become unstable, potentially interrupting graphical output and rendering services.

Affected Systems

This vulnerability affects multiple NVIDIA GPU products, including GeForce, RTX, Quadro, NVS, and Tesla models, as well as guest driver and virtual GPU manager components. The flaw is present in both Windows and Linux driver packages; version information was not disclosed in the public advisory.

Risk and Exploitability

With a CVSS score of 5.5, the vulnerability is considered medium severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation. The attack vector is likely local or requires privileged access to the kernel layer; the impact is limited to service disruption rather than data compromise. Users should monitor for driver crashes and apply patch updates as soon as they become available.

Generated by OpenCVE AI on September 30, 2026 at 18:31 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest NVIDIA driver update when released
  • Disable or remove the vulnerable guest driver or virtual GPU components if they are not required
  • Restrict kernel module loading on the system to reduce the attack surface
  • Monitor system logs for GPU driver crashes and investigate promptly

Generated by OpenCVE AI on September 30, 2026 at 18:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 02 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Kernel Mode Access Control Failure in NVIDIA GPU Display Driver Leading to Denial of Service nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Denial of Service via improper access control in the kernel mode layer
Metrics threat_severity

None

threat_severity

Moderate


Thu, 01 Oct 2026 04:15:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Nvidia virtual Gpu Manager

Wed, 30 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Title Kernel Mode Access Control Failure in NVIDIA GPU Display Driver Leading to Denial of Service

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service.
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Tesla Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-09-30T17:59:46.998Z

Reserved: 2026-05-19T19:55:40.488Z

Link: CVE-2026-47492

cve-icon Vulnrichment

Updated: 2026-09-30T17:55:46.329Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:13.577

Modified: 2026-09-30T18:18:19.220

Link: CVE-2026-47492

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-30T15:53:08Z

Links: CVE-2026-47492 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T04:00:13Z

Weaknesses