CVE-2026-47601: High severity Nvidia GPU Display Driver vulnerability
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-only buffer from another device's DMA-BUF exporter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running the NVIDIA GPU Display Driver on Windows or Linux are affected if they use the open-source kernel module DMA-BUF import path. Exploitation requires a local user account with low privileges; it is not described as remotely exploitable.
What must an attacker be able to do to exploit it?
An attacker needs local, low-privileged access and must be able to trigger import of a read-only buffer supplied by another device's DMA-BUF exporter. No user interaction is required.
What impact should defenders plan for?
Successful exploitation may enable code execution, privilege escalation, denial of service, information disclosure, and data tampering. The supplied vector rates confidentiality, integrity, and availability impacts as high.