Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-09-30T15:49:52 nvidia-driver: xorg-x11-drv-nvidia: NVIDIA GPU Display Driver: Arbitrary code execution via use-after-free 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-825

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

A flaw was found in the NVIDIA GPU Display Driver. An unprivileged local user can trigger a use-after-free condition, which occurs when the driver accesses memory that has already been released. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges, tamper with data, or cause a denial of service.

Red Hat rates this vulnerability as Important because an authenticated local user can achieve arbitrary code execution with kernel-level privileges, completely compromising host confidentiality, integrity, and availability. The flaw specifically affects systems with compatible NVIDIA hardware where the proprietary display driver stack is installed and actively in use. Default configurations without these external driver packages or environments that do not load the driver remain unaffected. To mitigate this vulnerability on systems where NVIDIA GPU acceleration or compute capabilities are not required, prevent the driver modules from loading: 1. Create a modprobe configuration file to blacklist the driver: # echo "blacklist nvidia" > /etc/modprobe.d/blacklist-nvidia.conf # echo "install nvidia /bin/false" >> /etc/modprobe.d/blacklist-nvidia.conf 2. If the module is included in the initramfs, regenerate the image: # dracut -f Caveats: Blacklisting this module will disable NVIDIA GPU hardware acceleration, graphical desktop rendering on the GPU, and compute frameworks (such as CUDA). If the driver is currently loaded into the running kernel, a system reboot is required for these changes to take effect. Red Hat Enterprise Linux 10 Fix deferred nvidia-driver Red Hat Enterprise Linux 9 Fix deferred nvidia-driver https://www.cve.org/CVERecord?id=CVE-2026-47516 https://nvd.nist.gov/vuln/detail/CVE-2026-47516 https://github.com/NVIDIA/product-security/tree/main/2026/5861