Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-09-30T15:49:24 nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unpreserved read-only memory permissions 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-281

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

A flaw was found in the NVIDIA GPU display driver. The driver's kernel mode layer does not properly preserve permissions on read-only memory. A local user can exploit this vulnerability to achieve privilege escalation or arbitrary code execution. Successful exploitation may also lead to data tampering, information disclosure, or a denial of service (DoS).

This vulnerability is rated as having Important impact because an authenticated local attacker can leverage kernel-level memory permission flaws to achieve arbitrary code execution in the context of the kernel, resulting in full system compromise. The issue only affects Red Hat Enterprise Linux hosts that have the proprietary NVIDIA display driver package installed and the corresponding kernel module loaded for NVIDIA GPU hardware. Systems without NVIDIA hardware, or systems utilizing default open-source display drivers, are unaffected. Red Hat Enterprise Linux 10 Affected nvidia-driver Red Hat Enterprise Linux 9 Affected nvidia-driver https://www.cve.org/CVERecord?id=CVE-2026-47489 https://nvd.nist.gov/vuln/detail/CVE-2026-47489 https://github.com/NVIDIA/product-security/tree/main/2026/5861