7.0Hoch
CVE-2026-47598
Beschreibung
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Schwachstellentyp (CWE):
CWE-416
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| NVIDIA | GeForce | All driver versions prior to 615.71.09 | |
| NVIDIA | Guest driver | 595.71.05(All versions prior to and including vGPU 20.1) | |
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 615.71.09 | |
| NVIDIA | Tesla | All driver versions prior to 615.71.09 | |
| NVIDIA | Virtual GPU Manager | 595.71.03(All versions prior to and including vGPU 20.1) |