Local User Access Vulnerability in NVIDIA GPU Display Driver for Windows and Linux
CVE-2026-47603

5.5MEDIUM

Key Information:

Vendor

Nvidia
Status
Geforce
Rtx, Quadro, Nvs
Tesla
Guest Driver
Vendor
CVE Published:
30 September 2026

What is CVE-2026-47603?

The NVIDIA GPU Display Driver for Windows and Linux is susceptible to a local user access vulnerability that allows unauthorized access to another process's GPU channel state. This flaw arises from inadequate authorization checks in the kernel mode driver. If exploited, it could lead to information disclosure, which poses risks to user privacy and data security. Users of the affected versions are encouraged to apply available security updates to mitigate this vulnerability.

Affected Version(s)

GeForce Linux(R580) All driver versions prior to 580.178.04

GeForce Linux(R595) All driver versions prior to 595.91.07

GeForce Linux(R610) All driver versions prior to 610.57.04

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47603
https://www.cve.org/CVERecord?id=CVE-2026-47603
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.