CVE-2026-47500

Awaiting Analysis Awaiting Analysis - Queue

NVIDIA GPU Display Driver Use-After-Free in Kernel Mode

Publication date: 2026-09-30

Last updated on: 2026-10-01

Assigner: NVIDIA Corporation

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead to a use-after-free condition. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-10-01

Generated

2026-10-19

AI Q&A

2026-09-30

EPSS Evaluated

2026-10-18

NVD

CVE-2026-47500

EUVD

EUVD-2026-90089

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	gpu_display_driver	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability is in NVIDIA GPU Display Driver for Windows and Linux. It involves improper cleanup of reference counts during error paths in the kernel mode layer, leading to a use-after-free condition. Exploiting this could allow code execution, denial of service, privilege escalation, information disclosure, or data tampering.

Detection Guidance

This vulnerability involves improper cleanup in NVIDIA GPU Display Driver's kernel mode layer. Detection requires checking driver versions and monitoring for use-after-free conditions. Use NVIDIA's official tools like nvidia-smi or nvidia-debugdump to inspect driver versions and system logs for crashes or memory corruption events.

Impact Analysis

If exploited, this vulnerability could allow attackers to execute arbitrary code, crash systems, gain elevated privileges, steal sensitive information, or alter data on affected systems running NVIDIA GPU Display Driver.

Compliance Impact

This vulnerability could lead to information disclosure and data tampering, which may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information. The potential for privilege escalation and unauthorized access further increases compliance risks.

Mitigation Strategies

Update NVIDIA GPU Display Driver to the latest patched version immediately to address the use-after-free vulnerability in the kernel mode layer.

Hi! I’m here to help you understand CVE-2026-47500. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70