CVE-2026-47598

Summary

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

Affected Software

VendorProductVersion RangeStatus
NVIDIAGeForceAll driver versions prior to 615.71.09affected
NVIDIAGeForceAll driver versions prior to 610.57.04affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 615.71.09affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 610.57.04affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 595.91.07affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 580.178.04affected
NVIDIATeslaAll driver versions prior to 615.71.09affected
NVIDIATeslaAll driver versions prior to 610.57.04affected
NVIDIATeslaAll driver versions prior to 595.91.07affected
NVIDIATeslaAll driver versions prior to 580.178.04affected
NVIDIAGeForceAll driver versions prior to 595.91.07affected
NVIDIAGeForceAll driver versions prior to 580.178.04affected
NVIDIAGuest driver595.71.05(All versions prior to and including vGPU 20.1)affected
NVIDIAGuest driver580.159.03(All versions prior to and including vGPU 19.5)affected
NVIDIAVirtual GPU Manager595.71.03(All versions prior to and including vGPU 20.1)affected
NVIDIAVirtual GPU Manager580.159.01(All versions prior to and including vGPU 19.5)affected

Weaknesses

  • CWE-416: CWE-416 Use After Free

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References