[ CVE-2026-47598 · Published 30 Sep 2026 ]

Vulnerability in NVIDIA GeForce

CVSS 7.0 EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories