Memory Access Vulnerability in NVIDIA GPU Display Driver for Windows and Linux
CVE-2026-47601

7.8HIGH

Key Information:

Vendor

Nvidia

Vendor
CVE Published:
30 September 2026

What is CVE-2026-47601?

The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in its open-source kernel module responsible for handling DMA-BUF imports. This flaw allows an unprivileged local user to compromise the integrity of memory access permissions when importing a read-only buffer from a different device's DMA-BUF exporter. If exploited successfully, this vulnerability could potentially lead to code execution, privilege escalation, denial of service, as well as unauthorized information disclosure and data tampering.

Affected Version(s)

GeForce Linux(R580) All driver versions prior to 580.178.04

GeForce Linux(R595) All driver versions prior to 595.91.07

GeForce Linux(R610) All driver versions prior to 610.57.04

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.