NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Metrics

No CVSS v4.0

Attack Vector Physical

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Nvidia
  • Geforce
  • Nvs
  • Quadro
  • Rtx
  • Tesla

No data.

No data.

References
Link Providers
https://github.com/NVIDIA/product-security/tree/main/2026/5861 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-47586 cve-icon cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-47586 cve-icon cve-icon cve-icon
History

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Kernel Module Use‑After‑Free Vulnerability in NVIDIA GPU Drivers nvidia-driver: nvidia-driver: arbitrary code execution via kernel module use-after-free
Weaknesses CWE-825
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 30 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Vendors & Products Nvidia
Nvidia geforce
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla

Wed, 30 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
Title Kernel Module Use‑After‑Free Vulnerability in NVIDIA GPU Drivers

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 6.4, 'vector': 'CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2026-09-30T15:53:05.857Z

Updated: 2026-09-30T17:29:28.660Z

Reserved: 2026-05-19T19:55:48.350Z

Link: CVE-2026-47586

cve-icon Vulnrichment

Updated: 2026-09-30T17:24:49.312Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:28.283

Modified: 2026-09-30T18:18:33.910

Link: CVE-2026-47586

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-30T15:53:05Z

Links: CVE-2026-47586 - Bugzilla