CVE-2026-47597

Awaiting Analysis Awaiting Analysis - Queue

NVIDIA GPU Display Driver Use-After-Free in Resource Server

Publication date: 2026-09-30

Last updated on: 2026-10-01

Assigner: NVIDIA Corporation

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free through a missing self-reference guard in the map cleanup path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-10-01

Generated

2026-10-19

AI Q&A

2026-09-30

EPSS Evaluated

2026-10-18

NVD

CVE-2026-47597

EUVD

EUVD-2026-90138

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	gpu_display_driver	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in NVIDIA GPU Display Driver due to a missing self-reference guard in the map cleanup path of the open-source kernel module Resource Server. An unprivileged local user can exploit this to cause a use-after-free condition, potentially leading to code execution, privilege escalation, denial of service, information disclosure, or data tampering.

Detection Guidance

This vulnerability cannot be directly detected using standard commands as it involves a use-after-free in the NVIDIA GPU Display Driver's kernel module. Detection would require monitoring for abnormal driver behavior, crashes, or system instability. Check for driver logs or errors in system event logs. Ensure the latest driver updates are applied to mitigate the risk.

Impact Analysis

If exploited, this vulnerability could allow an attacker with local access to execute arbitrary code, gain elevated privileges, disrupt system operations, steal sensitive information, or alter data on affected systems running NVIDIA GPU Display Driver.

Compliance Impact

This vulnerability could lead to information disclosure and data tampering, which are critical risks under GDPR and HIPAA. Unauthorized access or modification of data may violate compliance requirements for data protection and integrity.

Mitigation Strategies

Update NVIDIA GPU Display Driver to the latest version provided by NVIDIA to address the use-after-free vulnerability in the Resource Server kernel module.

Hi! I’m here to help you understand CVE-2026-47597. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70