7.0Alta
CVE-2026-47598
Descripción
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Debilidad (CWE):
CWE-416
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| NVIDIA | GeForce | All driver versions prior to 615.71.09 | |
| NVIDIA | Guest driver | 595.71.05(All versions prior to and including vGPU 20.1) | |
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 615.71.09 | |
| NVIDIA | Tesla | All driver versions prior to 615.71.09 | |
| NVIDIA | Virtual GPU Manager | 595.71.03(All versions prior to and including vGPU 20.1) |