← Back to search

CVE-2026-47601

7.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary
The flaw allows an unprivileged local user to exploit a vulnerability in the NVIDIA GPU Display Driver's DMA-BUF import path, potentially leading to code execution and privilege escalation.
Exploitability
Exploitation requires local access and knowledge of the DMA-BUF import mechanism; no specific preconditions are mentioned.
Blast radius
If exploited, the impact could include code execution, privilege escalation, denial of service, information disclosure, and data tampering.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the latest version of the NVIDIA GPU Display Driver.
rceprivilege-escalationmemory-accessdriver-vulnerability

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-only buffer from another device's DMA-BUF exporter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.