← Back to search

CVE-2026-47561

7.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary
The flaw is a buffer overflow vulnerability in the NVIDIA GPU Display Driver for Linux, which allows unprivileged users to execute arbitrary code or cause a denial of service. This matters because it can lead to significant security breaches, including code execution and privilege escalation.
Exploitability
Exploitation requires local access and knowledge of the specific ioctl command. The vulnerability is present in the kernel mode layer, making it potentially difficult to exploit without detailed understanding.
Blast radius
If exploited, the vulnerability could result in code execution, denial of service, and escalation of privileges, impacting the security and stability of the affected system.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the fixed version 535.30.03 or later.
rceprivilege-escalationkernellocal-privilege

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated, allowing an unprivileged caller to trigger an out-of-bounds write in kernel memory. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.