Description
NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service and information disclosure.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch Promptly
AI Analysis

Impact

This vulnerability is a use‑after‑free in the NVIDIA GPU Display Driver for Linux. An unprivileged user can send a specific sequence of driver commands to trigger the flaw, which may allow arbitrary code execution, privilege escalation, denial of service, or information disclosure. The weakness is classified as CWE‑416.

Affected Systems

The flaw affects the NVIDIA GPU Display Driver for Linux bundled with NVIDIA GeForce, Quadro, RTX, Tesla, NVS and Guest Driver families. No specific version range was supplied, so all current releases that include this driver code are potentially vulnerable.

Risk and Exploitability

The CVSS score of 7.8 reflects substantial impact. While no EPSS score is available, the flaw is local and requires an unprivileged user to interact with the driver, making exploitation likely in environments where such users exist. It is not listed in the CISA KEV catalog, indicating no publicly documented exploits yet.

Generated by OpenCVE AI on October 1, 2026 at 03:38 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the NVIDIA GPU Display Driver on Linux to the latest release that contains the fix for CVE-2026-47588.
  • If an update is not yet available, restrict driver access by applying stricter udev rules or device permissions so that non‑privileged users cannot load or communicate with the GPU driver module.
  • Monitor system logs for anomalous driver activity and consider hardening the kernel environment with SELinux or AppArmor profiles targeting the NVIDIA driver module.

Generated by OpenCVE AI on October 1, 2026 at 03:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in NVIDIA GPU Display Driver for Linux Allows Privilege Escalation nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free
Weaknesses CWE-825
Metrics threat_severity

None

 threat_severity

Important

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in NVIDIA GPU Display Driver for Linux Allows Privilege Escalation
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service and information disclosure.
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Tesla
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-02T03:55:19.131Z

Reserved: 2026-05-19T19:55:48.351Z

Link: CVE-2026-47588

cve-icon Vulnrichment

Updated: 2026-09-30T17:56:26.542Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:28.577

Modified: 2026-10-02T04:18:07.870

Link: CVE-2026-47588

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-30T15:51:02Z

Links: CVE-2026-47588 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T03:45:17Z

Weaknesses