CVE-2026-47604

MediumCVSS 5.5/10Last modified Sep 30, 2026

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 610.88
NVIDIARTX, Quadro, NVSAll driver versions prior to 610.88
NVIDIAGeForceAll driver versions prior to 616.56
NVIDIARTX, Quadro, NVSAll driver versions prior to 616.92
NVIDIAGeForceAll driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
NVIDIARTX, Quadro, NVSAll driver versions prior to 582.78
NVIDIARTX, Quadro, NVSAll driver versions prior to 596.86
NVIDIATeslaAll driver versions prior to 596.86
NVIDIATeslaAll driver versions prior to 596.86
NVIDIATeslaAll driver versions prior to 616.92
NVIDIATeslaAll driver versions prior to 610.88
NVIDIAGeForceAll driver versions prior to 615.71.09
NVIDIAGeForceAll driver versions prior to 610.57.04
NVIDIARTX, Quadro, NVSAll driver versions prior to 615.71.09
NVIDIARTX, Quadro, NVSAll driver versions prior to 610.57.04
NVIDIARTX, Quadro, NVSAll driver versions prior to 595.91.07
NVIDIARTX, Quadro, NVSAll driver versions prior to 580.178.04
NVIDIATeslaAll driver versions prior to 615.71.09
NVIDIATeslaAll driver versions prior to 610.57.04
NVIDIATeslaAll driver versions prior to 595.91.07
NVIDIATeslaAll driver versions prior to 580.178.04
NVIDIAGeForceAll driver versions prior to 595.91.07
NVIDIAGeForceAll driver versions prior to 580.178.04
NVIDIAGuest driver596.36(All versions prior to and including vGPU 20.1)
NVIDIAGuest driver582.53(All versions prior to and including vGPU 19.5)
NVIDIAGuest driver595.71.05(All versions prior to and including vGPU 20.1)
NVIDIAGuest driver580.159.03(All versions prior to and including vGPU 19.5)
NVIDIAVirtual GPU Manager595.71.03(All versions prior to and including vGPU 20.1)
NVIDIAVirtual GPU Manager580.159.01(All versions prior to and including vGPU 19.5)
NVIDIAVirtual GPU Manager596.38(All versions prior to and including vGPU 20.1)
NVIDIAVirtual GPU Manager582.51(All versions prior to and including vGPU 19.5)

References

Timeline

Published
Sep 30, 2026
Last modified
Sep 30, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-476069.1NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful expCVE-2026-47617.5When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rightsCVE-2026-476127.5NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathnamCVE-2026-476137.5NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by CVE-2026-476147.5NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulneCVE-2026-476157.5NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a mulCVE-2026-476167.5NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A CVE-2026-476177.5NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery viaCVE-2026-476187.5NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgCVE-2026-476198.1NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit ofCVE-2026-47628.8A vulnerability to perform a privilege escalation attack on the server as a non-admin user.CVE-2026-476206.5NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization
CVE-2026-47604: Medium severity, CVSS 5.5 | Vulnix