Use-After-Free Vulnerability in NVIDIA GPU Display Driver for Windows and Linux
CVE-2026-47586

6.4MEDIUM

Key Information:

Vendor

Nvidia
Status
Geforce
Rtx, Quadro, Nvs
Tesla
Vendor
CVE Published:
30 September 2026

What is CVE-2026-47586?

The NVIDIA GPU Display Driver for both Windows and Linux exhibits a use-after-free vulnerability within its kernel module. This flaw could potentially allow an attacker to execute arbitrary code, leading to various consequences such as denial of service, privilege escalation, information disclosure, and data tampering. Organizations utilizing affected drivers should prioritize updating to mitigate risks associated with this vulnerability.

Affected Version(s)

GeForce Linux(R580) All driver versions prior to 580.178.04

GeForce Linux(R595) All driver versions prior to 595.91.07

GeForce Linux(R610) All driver versions prior to 610.57.04

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47586
https://www.cve.org/CVERecord?id=CVE-2026-47586
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.