CVE-2026-47598: Use After Free
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running the NVIDIA GPU Display Driver for Linux with the open-source kernel module are exposed. Exploitation requires local access by an unprivileged user.
What does an attacker need to do to exploit it?
An attacker needs to trigger a race between asynchronous event delivery and file close in the open-source kernel module event delivery path. No user interaction is required.
What could a successful exploit allow?
Successful exploitation might permit code execution, privilege escalation, denial of service, information disclosure, or data tampering.