Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak in error paths leading to kernel memory exhaustion. A successful exploit of this vulnerability might lead to denial of service.
Published: 2026-09-30
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Monitor
AI Analysis

Impact

NVIDIA GPU Display Driver for Linux has a vulnerability in its kernel mode layer. An unprivileged user can trigger a memory leak during error handling, causing kernel memory exhaustion. The resulting kernel resource depletion leads to denial of service for the affected system, preventing legitimate user or kernel processes from functioning normally.

Affected Systems

The vulnerability affects several NVIDIA graphics products, including GeForce, Guest driver, RTX, Quadro, NVS, Tesla, and the Virtual GPU Manager on Linux platforms. Versions are not specified, so any installation of these drivers may be at risk.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity. No EPSS data is available, suggesting that current evidence of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local privilege; an unprivileged user can initiate the error path to consume kernel memory, but it does not allow code execution or privilege escalation. The risk is a local denial of service when the kernel runs out of memory.

Generated by OpenCVE AI on October 1, 2026 at 03:04 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest NVIDIA graphics driver once NVIDIA releases a patch for the memory leak issue.
  • If a patch is unavailable, restrict unprivileged users from loading or interacting with the NVIDIA kernel mode driver by using kernel module control or SELinux policies.
  • Configure system memory limits and monitor kernel memory usage to detect and mitigate kernel memory exhaustion before a complete DoS occurs.

Generated by OpenCVE AI on October 1, 2026 at 03:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Kernel Memory Leak Causing Kernel Exhaustion in NVIDIA Linux Drivers nvidia-driver: nvidia-driver: Denial of Service via kernel memory leak
Weaknesses CWE-772
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 30 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia virtual Gpu Manager

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 18:15:00 +0000

Type Values Removed Values Added
Title Kernel Memory Leak Causing Kernel Exhaustion in NVIDIA Linux Drivers

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak in error paths leading to kernel memory exhaustion. A successful exploit of this vulnerability might lead to denial of service.
Weaknesses CWE-401
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-09-30T17:59:46.000Z

Reserved: 2026-05-19T19:55:46.482Z

Link: CVE-2026-47566

cve-icon Vulnrichment

Updated: 2026-09-30T17:55:36.237Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:25.357

Modified: 2026-09-30T18:18:29.797

Link: CVE-2026-47566

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-30T15:54:02Z

Links: CVE-2026-47566 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T03:15:15Z

Weaknesses
  • CWE-401

    Missing Release of Memory after Effective Lifetime

  • CWE-772

    Missing Release of Resource after Effective Lifetime