CVE-2026-47601 PUBLISHED

Assigner: nvidia
Reserved: 19.05.2026 Published: 30.09.2026 Updated: 30.09.2026

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-only buffer from another device's DMA-BUF exporter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 610.60 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 610.88 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 616.56 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 616.92 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected. is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 582.78 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 596.86 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 616.92 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 610.88 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 615.71.09 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 610.57.04 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 615.71.09 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 610.57.04 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 595.91.07 is affected
Vendor NVIDIA
Product RTX, Quadro, NVS
Versions Default: unaffected
  • Version All driver versions prior to 580.178.04 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 615.71.09 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 610.57.04 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 595.91.07 is affected
Vendor NVIDIA
Product Tesla
Versions Default: unaffected
  • Version All driver versions prior to 580.178.04 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 595.91.07 is affected
Vendor NVIDIA
Product GeForce
Versions Default: unaffected
  • Version All driver versions prior to 580.178.04 is affected

References

Problem Types

  • CWE-787 Out-of-bounds Write CWE

Impacts

  • code execution, escalation of privileges, data tampering, denial of service, information disclosure