Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
Published: 2026-09-30
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Assess Impact
AI Analysis

Impact

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer that allows an unprivileged user to trigger a NULL pointer dereference. A successful exploitation might lead to denial of service.

Affected Systems

Multiple NVIDIA GPU driver families for Linux, including GeForce, RTX, Quadro, NVS, Tesla, Guest driver, and Virtual GPU Manager, are affected. No specific version numbers are provided.

Risk and Exploitability

The vulnerability has a CVSS score of 5.5, indicating moderate risk. EPSS is not available, so the likelihood of exploitation is uncertain. The vulnerability is not listed in CISA KEV, suggesting no known active exploits. An attacker would need to be an unprivileged local user on the system to trigger the null dereference; no privilege escalation is required.

Generated by OpenCVE AI on September 30, 2026 at 18:29 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check NVIDIA's product security portal or contact NVIDIA support for information about a corrective patch or temporary mitigation.
  • Restrict unprivileged user access to GPU resources on affected systems, for example by using user namespaces or GPU access controls.
  • Apply the latest NVIDIA GPU drivers and kernel updates once they become available, and verify that the update includes the null pointer dereference fix.

Generated by OpenCVE AI on September 30, 2026 at 18:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 01:00:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Nvidia virtual Gpu Manager

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Unprivileged NULL Pointer Dereference in NVIDIA GPU Display Driver for Linux nvidia-driver: nvidia-driver: Denial of Service via NULL pointer dereference in kernel mode layer
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 30 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
Title Unprivileged NULL Pointer Dereference in NVIDIA GPU Display Driver for Linux

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
Weaknesses CWE-476
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Tesla Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-09-30T17:59:46.159Z

Reserved: 2026-05-19T19:55:45.574Z

Link: CVE-2026-47557

cve-icon Vulnrichment

Updated: 2026-09-30T17:55:37.560Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:24.080

Modified: 2026-09-30T18:18:28.687

Link: CVE-2026-47557

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-30T15:54:00Z

Links: CVE-2026-47557 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T00:45:07Z

Weaknesses