Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
Published: 2026-09-30
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service and Information Disclosure
Action: Apply Patch
AI Analysis

Impact

A local user can trigger the NVIDIA GPU display driver to dereference an untrusted pointer in kernel mode, which may cause the driver to crash (denial of service) and potentially expose sensitive data. The weakness is a classic buffer overflow (CWE-119 and CWE-822).

Affected Systems

NVIDIA GPU display drivers on Windows and Linux, affecting all model families listed by NVIDIA, including GeForce, RTX, Quadro, NVS, Tesla, and the Virtual GPU Manager. Exact affected driver versions are not specified in the advisory.

Risk and Exploitability

The vulnerability has a CVSS score of 7.1, indicating moderate severity. EPSS data is unavailable and it is not flagged in CISA’s KEV. Based on the description, the exploit requires local user privileges; there is no indication of remote attack paths or publicly available code, so the risk is confined to systems where a non‑privileged local user has access to the vulnerable driver. The potential impact remains a service disruption and possible leakage of driver or system state information.

Generated by OpenCVE AI on October 1, 2026 at 03:06 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update all NVIDIA GPU drivers to the latest version that contains the fix.
  • If the vulnerable driver is not required for the system’s operation, consider disabling or uninstalling it.
  • Ensure that local user accounts have the minimum privileges necessary, limiting their ability to load or interact with kernel mode drivers.

Generated by OpenCVE AI on October 1, 2026 at 03:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Kernel Mode Driver Dereference Vulnerability in NVIDIA GPU Drivers nvidia-driver: nvidia-driver: Denial of Service via untrusted pointer dereference
Weaknesses CWE-822
Metrics threat_severity

None

 threat_severity

Important

Thu, 01 Oct 2026 00:00:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia rtx, Quadro, Nvs
Nvidia tesla
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia geforce
Nvidia rtx, Quadro, Nvs
Nvidia tesla
Nvidia virtual Gpu Manager

Wed, 30 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Title Kernel Mode Driver Dereference Vulnerability in NVIDIA GPU Drivers

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
Weaknesses CWE-119
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

Subscriptions

Nvidia Geforce Rtx, Quadro, Nvs Tesla Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-09-30T17:29:30.344Z

Reserved: 2026-05-19T19:55:50.277Z

Link: CVE-2026-47602

cve-icon Vulnrichment

Updated: 2026-09-30T17:25:12.090Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:30.733

Modified: 2026-09-30T18:18:36.560

Link: CVE-2026-47602

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-30T15:51:38Z

Links: CVE-2026-47602 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T03:15:15Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-822

    Untrusted Pointer Dereference