Vulnerability in NVIDIA GPU Display Driver for Windows and Linux
CVE-2026-47597

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Geforce
Rtx, Quadro, Nvs
Tesla
Guest Driver
Vendor
CVE Published:
30 September 2026

What is CVE-2026-47597?

The NVIDIA GPU Display Driver for both Windows and Linux contains a vulnerability within the open-source kernel module known as Resource Server. This flaw allows unprivileged local users to exploit a use-after-free condition due to a missing self-reference guard in the map cleanup process. A successful exploitation could result in the execution of arbitrary code, elevation of privileges, denial of service, disclosure of sensitive information, or unauthorized data modification.

Affected Version(s)

GeForce Linux(R580) All driver versions prior to 580.178.04

GeForce Linux(R595) All driver versions prior to 595.91.07

GeForce Linux(R610) All driver versions prior to 610.57.04

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47597
https://www.cve.org/CVERecord?id=CVE-2026-47597
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.