{"id":"CVE-2026-47549","title":"NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged local user could cause a NULL pointer dereference","summary":"NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged local user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"vendor":"NVIDIA","product":"GeForce","affected":["GeForce All driver versions prior to 615.71.09","GeForce All driver versions prior to 610.57.04","rtx_quadro_nvs All driver versions prior to 615.71.09","rtx_quadro_nvs All driver versions prior to 610.57.04","rtx_quadro_nvs All driver versions prior to 595.91.07","Tesla All driver versions prior to 615.71.09","Tesla All driver versions prior to 610.57.04","Tesla All driver versions prior to 595.91.07","GeForce All driver versions prior to 595.91.07","guest_driver 595.71.05(All versions prior to and including vGPU 20.1)","guest_driver 580.159.03(All versions prior to and including vGPU 19.5)","virtual_gpu_manager 595.71.03(All versions prior to and including vGPU 20.1)","virtual_gpu_manager 580.159.01(All versions prior to and including vGPU 19.5)"],"published":"2026-09-30","updated":"2026-09-30","sourceUpdated":"2026-09-30T18:18:27.497","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47549","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","label":"psirt@nvidia.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47549","label":"psirt@nvidia.com"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47549","label":"psirt@nvidia.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47549.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-47549"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2544045"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-30T17:42:49.289382Z"},"ingestedAt":"2026-09-30T16:10:07.275Z","epss":0.00152,"epssPercentile":0.03695,"slug":"CVE-2026-47549","body":"## Overview\n\nNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged local user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 · updated 2026-09-30 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47549.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}