Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation
Action: Assess Impact
AI Analysis

Impact

A flaw in the kernel mode layer of NVIDIA GPU Display Driver for Windows and Linux allows code execution, privilege escalation, denial of service, information disclosure, and data tampering when an error-handling path operates on an improperly initialized resource. The weakness is classified as CWE-908. Successful exploitation could compromise the integrity of system processes and data, potentially giving the attacker elevated rights on the host system.

Affected Systems

Systems running NVIDIA GPU Display Driver for Windows or Linux on GeForce, Guest driver, RTX, Quadro, NVS, or Tesla GPUs are impacted. No specific driver version range is provided, but all versions of the GPU Display Driver that include the vulnerable kernel‑mode layer are affected.

Risk and Exploitability

The vulnerability carries a CVSS score of 7.8. EPSS is not available and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local, requiring execution of malicious code in the context of a user or application that loads the driver. The risk remains high until an official fix is released, as code execution in kernel mode could allow the attacker to gain full control of the system.

Generated by OpenCVE AI on September 30, 2026 at 18:44 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Verify whether the system is running the NVIDIA GPU Display Driver for Windows or Linux; if a vulnerable version is detected, consider using a known safe release or waiting for the vendor to issue a patch.
  • Enforce least privilege on local user accounts, restricting administrative rights for ordinary users to limit the impact of a kernel‑mode exploit.
  • Monitor system logs for unexpected driver crashes, memory corruption, or repeated denial‑of‑service events that may indicate exploitation attempts and investigate promptly.

Generated by OpenCVE AI on September 30, 2026 at 18:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 02 Oct 2026 01:00:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia guest Driver
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title NVIDIA GPU Display Driver Improper Resource Initialization Vulnerability nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource
Metrics threat_severity

None

 threat_severity

Important

Wed, 30 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Title NVIDIA GPU Display Driver Improper Resource Initialization Vulnerability

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Weaknesses CWE-908
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Geforce Guest Driver Nvs Quadro Rtx Tesla
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-01T03:56:20.121Z

Reserved: 2026-05-19T19:55:49.283Z

Link: CVE-2026-47600

cve-icon Vulnrichment

Updated: 2026-09-30T17:25:19.633Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:30.400

Modified: 2026-10-01T04:18:18.747

Link: CVE-2026-47600

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-30T15:51:23Z

Links: CVE-2026-47600 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-02T00:45:07Z

Weaknesses
  • CWE-908

    Use of Uninitialized Resource