Null Pointer Dereference in NVIDIA GPU Display Driver for Windows and Linux
CVE-2026-47526

4.4MEDIUM

Key Information:

Vendor

Nvidia
Status
Geforce
Rtx, Quadro, Nvs
Tesla
Vendor
CVE Published:
30 September 2026

What is CVE-2026-47526?

The NVIDIA GPU Display Driver for both Windows and Linux is susceptible to a vulnerability that arises from a null pointer dereference in its firmware. If exploited, this vulnerability could enable an attacker to induce a denial of service condition, disrupting the normal operation of the affected systems. Users are urged to apply available updates to mitigate the risks associated with this issue.

Affected Version(s)

GeForce Linux(R580) All driver versions prior to 580.178.04

GeForce Linux(R595) All driver versions prior to 595.91.07

GeForce Linux(R610) All driver versions prior to 610.57.04

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47526
https://www.cve.org/CVERecord?id=CVE-2026-47526
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.