Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Code execution and privilege escalation via kernel‑mode out‑of‑bounds write
Action: Apply patch
AI Analysis

Impact

An unprivileged user can trigger an out‑of‑bounds write in the kernel‑mode layer of NVIDIA GPU Display Drivers for Windows and Linux, causing corruption of critical kernel data structures. This flaw falls under the CWE‑787 category and can lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering, potentially affecting all users running the drivers.

Affected Systems

The vulnerability affects NVIDIA GPUs in the GeForce, RTX, Quadro, NVS, Tesla lines as well as the NVIDIA Guest driver. Affected driver versions are not specified; any driver implementation that contains the flaw is susceptible.

Risk and Exploitability

The CVSS score of 7.8 indicates a high‑severity risk. The EPSS score is not available, and the flaw is not listed in CISA’s KEV catalog. The attack vector is expected to be local, requiring execution of code that interfaces with the driver; an unprivileged user can trigger the flaw without additional access or network interaction.

Generated by OpenCVE AI on September 30, 2026 at 18:57 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update all NVIDIA GPU display drivers to the latest released versions that include the kernel‑mode fix.
  • If an immediate driver upgrade is not possible, disable or uninstall unnecessary NVIDIA drivers on systems that do not require GPU acceleration.
  • Apply additional kernel hardening controls (e.g., SELinux, AppArmor, or signed drivers) to restrict unprivileged processes from executing code that interacts with the NVIDIA driver.

Generated by OpenCVE AI on September 30, 2026 at 18:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 02 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA GPU Display Driver Enables Kernel‑Mode Exploitation nvidia-driver: nvidia-driver: Privilege escalation via out-of-bounds write in kernel mode layer
Metrics threat_severity

None

 threat_severity

Important

Thu, 01 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Wed, 30 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA GPU Display Driver Enables Kernel‑Mode Exploitation

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Tesla
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-01T03:56:37.737Z

Reserved: 2026-05-19T19:55:45.573Z

Link: CVE-2026-47553

cve-icon Vulnrichment

Updated: 2026-09-30T17:57:21.371Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:23.410

Modified: 2026-10-01T04:18:15.623

Link: CVE-2026-47553

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-30T15:50:21Z

Links: CVE-2026-47553 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T01:00:10Z

Weaknesses