← Back to search

CVE-2026-47501

7.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary
The flaw allows a user to cause an out-of-bounds write by supplying mismatched memory buffers, potentially leading to code execution, data tampering, and privilege escalation.
Exploitability
Exploitation requires specific memory buffer manipulation and kernel access, making it moderately difficult. Precondition: The user must have the ability to supply mismatched memory buffers during event buffer setup.
Blast radius
If exploited, this vulnerability could result in significant damage, including code execution and data manipulation, affecting the system's integrity and availability.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the fixed version 535.60 or later.
rceprivilege-escalationmemory-corruption

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.