CVE-2026-47597

Public on 2026-09-30
Modified on 2026-10-03
Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free through a missing self-reference guard in the map cleanup path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
7.8
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2023 cuda Not Affected
Amazon Linux 2023 cuda-12-5 Not Affected
Amazon Linux 2023 cuda-12-6 Not Affected
Amazon Linux 2023 cuda-12-8 Not Affected
Amazon Linux 2023 cuda-12-9 Not Affected
Amazon Linux 2023 cuda-13-0 Not Affected
Amazon Linux 2023 cuda-13-1 Not Affected
Amazon Linux 2023 cuda-13-2 Not Affected
Amazon Linux 2023 cuda-13-3 Not Affected
Amazon Linux 2023 cuda-13-4 Not Affected
Amazon Linux 2023 kmod-nvidia-latest-dkms Pending Fix
Amazon Linux 2023 kmod-nvidia-open-dkms Pending Fix
Amazon Linux 2023 libnvidia-cfg Pending Fix
Amazon Linux 2023 libnvidia-fbc Pending Fix
Amazon Linux 2023 libnvidia-gpucomp Pending Fix
Amazon Linux 2023 libnvidia-ml Pending Fix
Amazon Linux 2023 nvidia-driver-cuda Pending Fix
Amazon Linux 2023 nvidia-driver-cuda-libs Pending Fix
Amazon Linux 2023 nvidia-driver-libs Pending Fix
Amazon Linux 2023 nvidia-open Pending Fix
Amazon Linux 2023 xorg-x11-nvidia Pending Fix

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H