CVE-2026-47591

HighCVSS 7.8/10Last modified Oct 2, 2026

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 615.71.09
NVIDIAGeForceAll driver versions prior to 610.57.04
NVIDIARTX, Quadro, NVSAll driver versions prior to 615.71.09
NVIDIARTX, Quadro, NVSAll driver versions prior to 610.57.04
NVIDIARTX, Quadro, NVSAll driver versions prior to 595.91.07
NVIDIARTX, Quadro, NVSAll driver versions prior to 580.178.04
NVIDIATeslaAll driver versions prior to 615.71.09
NVIDIATeslaAll driver versions prior to 610.57.04
NVIDIATeslaAll driver versions prior to 595.91.07
NVIDIATeslaAll driver versions prior to 580.178.04
NVIDIAGeForceAll driver versions prior to 595.91.07
NVIDIAGeForceAll driver versions prior to 580.178.04
NVIDIAVirtual GPU Manager595.71.03(All versions prior to and including vGPU 20.1)
NVIDIAVirtual GPU Manager580.159.01(All versions prior to and including vGPU 19.5)

References

Timeline

Published
Sep 30, 2026
Last modified
Oct 2, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-475927.8NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an CVE-2026-475937.8NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-boundCVE-2026-475947.8NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by CVE-2026-475957.8NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memoCVE-2026-475967.0NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memoCVE-2026-475977.8NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileCVE-2026-475987.0NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged locaCVE-2026-475997.8NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause iCVE-2026-47607.7From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are acceCVE-2026-476007.8NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operateCVE-2026-476017.8NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unpriCVE-2026-476027.1NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver t