CVE-2026-47561
Awaiting Analysis Awaiting Analysis - Queue

NVIDIA GPU Display Driver Linux Kernel Memory Corruption

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: NVIDIA Corporation

Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated, allowing an unprivileged caller to trigger an out-of-bounds write in kernel memory. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-47561
EUVD
EUVD-2026-90116

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia gpu_display_driver *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA GPU Display Driver for Linux has a flaw in the kernel mode layer where an unprivileged user can exploit an unvalidated ioctl input buffer size. This leads to an out-of-bounds write in kernel memory, potentially causing serious issues like code execution, system crashes, privilege escalation, data leaks, or unauthorized data changes.

Detection Guidance

This vulnerability involves an out-of-bounds write in the NVIDIA GPU Display Driver kernel mode layer. Detection requires checking the driver version and kernel logs for suspicious activity. Use commands like 'nvidia-smi' to verify driver version and 'dmesg | grep -i nvidia' to inspect kernel logs for errors. Ensure your system is running the latest patched driver version.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious code on your system, gain higher privileges, crash your device, steal sensitive information, or alter data without authorization. It primarily affects systems using NVIDIA GPU Display Driver on Linux.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations may face legal penalties, reputational damage, and compliance failures if exploited.

Mitigation Strategies

Immediately update the NVIDIA GPU Display Driver to the latest version provided by NVIDIA. Restrict unprivileged user access to GPU-related ioctl operations. Monitor system logs for signs of exploitation. Apply kernel hardening measures if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47561. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart