7.8High

CVE-2026-47597

NVIDIA GeForce; NVIDIA RTX, Quadro, NVS; NVIDIA Tesla; NVIDIA Guest driver Published: (1 month ago)

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free through a missing self-reference guard in the map cleanup path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

Weakness (CWE): CWE-416

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
NVIDIA GeForce All driver versions prior to 610.60
NVIDIA Guest driver 595.71.05(All versions prior to and including vGPU 20.1)
NVIDIA RTX, Quadro, NVS All driver versions prior to 610.88
NVIDIA Tesla All driver versions prior to 596.86

References and patches