Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Published: 2026-09-30
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation / Code Execution
Action: Patch Now
AI Analysis

Impact

The vulnerability is a use‑after‑free in the kernel module of NVIDIA's GPU display driver for Linux. An unprivileged local user can trigger a race between asynchronous event delivery and the closing of a file descriptor. The effect is a use‑after‑free that can potentially lead to code execution, privilege escalation, denial of service, information disclosure, or data tampering. This weakness is classified as CWE-416 and CWE-825.

Affected Systems

Affected vendors include NVIDIA, specifically the GeForce, Guest Driver, RTX, Quadro, NVS, Tesla, and Virtual GPU Manager product lines. All Linux drivers that contain the open‑source kernel event delivery path are vulnerable. No specific version numbers are listed; any driver installation matching these product families is potentially impacted unless updated to a fixed release.

Risk and Exploitability

The CVSS score is 7, indicating a moderate‑to‑high severity. EPSS is not available, and the vulnerability is not listed in CISA's KEV catalog. The attack surface requires local, unprivileged access, meaning the threat is limited to users who already have login rights on the host. Until a vendor patch is released, the risk remains moderate to high, especially for systems with exposed GPU devices to local users.

Generated by OpenCVE AI on October 1, 2026 at 03:05 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest NVIDIA graphics driver release that contains the fix for the use‑after‑free vulnerability.
  • Restrict access to GPU device files (e.g., /dev/nvidia*) by setting permissions to 660, owned by root:nvidia, and limit membership of the nvidia group to trusted users.
  • Disable or uninstall the Guest Driver feature if not required, or configure it to the highest security setting available.
  • Monitor kernel logs for GPU‑related crashes and configure alerts for kernel panics or unexplained termination during GPU activity.

Generated by OpenCVE AI on October 1, 2026 at 03:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Kernel Use‑After‑Free Vulnerability in NVIDIA Linux GPU Drivers nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free in event delivery path
Weaknesses CWE-825
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 01 Oct 2026 00:00:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Nvidia virtual Gpu Manager

Wed, 30 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Title Kernel Use‑After‑Free Vulnerability in NVIDIA Linux GPU Drivers

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Tesla Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-01T03:55:59.136Z

Reserved: 2026-05-19T19:55:49.283Z

Link: CVE-2026-47598

cve-icon Vulnrichment

Updated: 2026-09-30T17:56:04.531Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:30.123

Modified: 2026-10-01T04:18:18.440

Link: CVE-2026-47598

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-30T15:52:23Z

Links: CVE-2026-47598 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T03:15:15Z

Weaknesses