Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an integer overflow that leads to an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The NVIDIA GPU Display Driver for Windows and Linux contains an integer overflow in the kernel mode layer that can cause an out‑of‑bounds memory write. This flaw can be used by an unprivileged local user to obtain arbitrary code execution, which in turn enables denial‑of‑service, privilege escalation, information disclosure, or data tampering. The weakness is an improper numerical calculation (CWE‑190).

Affected Systems

The flaw affects all NVIDIA GPU drivers that handle the kernel mode display stack, including GeForce, RTX, Quadro, NVS, Tesla, and Guest driver family components. Both Windows and Linux operating systems are impacted. No specific driver version details are disclosed, so any installation of the current driver set is potentially vulnerable.

Risk and Exploitability

The vulnerability carries a CVSS score of 7.8, indicating high severity, and is not listed in the CISA KEV catalog. The exploitation requires local access to the machine with an unprivileged user account, but the resulting kernel mode write can lead to system compromise. Since no EPSS score is available, the empirical likelihood of exploitation is currently unknown, but the high score and attention.

Generated by OpenCVE AI on October 1, 2026 at 03:41 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to the latest NVIDIA GPU Display Driver that incorporates the integer‑overflow fix.
  • Restrict local user accounts from accessing the driver or GPU services, limiting the execution context for potential exploits.
  • Enforce OS‑level driver signing and use security frameworks such as SELinux, AppArmor, or Windows Defender Credential Guard to harden the kernel interaction with GPU drivers.

Generated by OpenCVE AI on October 1, 2026 at 03:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Kernel Mode Integer Overflow in NVIDIA GPU Drivers nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode integer overflow
Weaknesses CWE-787
Metrics threat_severity

None

 threat_severity

Important

Wed, 30 Sep 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Wed, 30 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
Title Kernel Mode Integer Overflow in NVIDIA GPU Drivers

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an integer overflow that leads to an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-190
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Tesla
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-01T03:56:38.473Z

Reserved: 2026-05-19T19:55:45.574Z

Link: CVE-2026-47556

cve-icon Vulnrichment

Updated: 2026-09-30T17:57:19.888Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:23.913

Modified: 2026-10-01T04:18:15.797

Link: CVE-2026-47556

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-30T15:50:22Z

Links: CVE-2026-47556 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T03:45:17Z

Weaknesses