CVE-2026-47554
Awaiting Analysis Awaiting Analysis - Queue

NVIDIA GPU Display Driver Linux Signature Bypass

Vulnerability report for CVE-2026-47554, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: NVIDIA Corporation

Description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia gpu_display_driver *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA GPU Display Driver for Linux has a flaw in its kernel mode layer where improper cryptographic signature verification may allow bypassing signature checks during memory pressure. This could enable an attacker to tamper with data or cause a denial of service.

Impact Analysis

If exploited, this vulnerability could lead to denial of service, making systems unstable or unresponsive. It may also allow unauthorized data tampering, potentially compromising system integrity or confidentiality.

Compliance Impact

This vulnerability could impact compliance by enabling data tampering, which may violate integrity requirements in GDPR and HIPAA. Denial of service could also disrupt availability obligations under these regulations.

Mitigation Strategies

Update the NVIDIA GPU Display Driver for Linux to the latest version provided by NVIDIA to address the improper cryptographic signature verification issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47554. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart