Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Local Privilege Escalation
Action: Immediate Patch
AI Analysis

Impact

An out‑of‑bounds read vulnerability in NVIDIA GPU Display Driver kernel mode layer can be triggered by an unprivileged user, potentially leading to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

Affected Systems

Affected products include NVIDIA GeForce, RTX, Quadro, NVS, Tesla, Guest driver, and Virtual GPU Manager running on Windows and Linux. Specific affected driver versions have not been disclosed in the available data.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity level, but the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, requiring an unprivileged user to load the vulnerable driver. If exploited, the attack could achieve kernel‑level code execution and compromise the entire host system.

Generated by OpenCVE AI on September 30, 2026 at 18:03 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest NVIDIA GPU driver that contains the vendor’s fix for the out‑of‑bounds read vulnerability.
  • If an update is not immediately available, disable the buggy GPU display driver or restrict its loading by using kernel module limits or disabling the Virtual GPU Manager where possible.
  • Restrict local user privileges to prevent untrusted users from interacting with GPU devices and monitor system logs for anomalous driver activity.

Generated by OpenCVE AI on September 30, 2026 at 18:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Kernel Mode Out‑of‑Bounds Read in NVIDIA GPU Drivers nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds read in kernel mode layer
Metrics threat_severity

None

 threat_severity

Important

Wed, 30 Sep 2026 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia rtx, Quadro, Nvs
Nvidia tesla
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia rtx, Quadro, Nvs
Nvidia tesla
Nvidia virtual Gpu Manager

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title Kernel Mode Out‑of‑Bounds Read in NVIDIA GPU Drivers
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Rtx, Quadro, Nvs Tesla Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-02T03:55:23.357Z

Reserved: 2026-05-19T19:55:49.283Z

Link: CVE-2026-47592

cve-icon Vulnrichment

Updated: 2026-09-30T17:56:21.066Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:29.200

Modified: 2026-10-02T04:18:08.560

Link: CVE-2026-47592

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-30T15:51:08Z

Links: CVE-2026-47592 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T23:00:16Z

Weaknesses