CVE-2026-47599

Public on 2026-09-30
Modified on 2026-10-03
Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
7.8
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2023 cuda-drivers 2026-11-02 ALAS2023NVIDIA-2026-316 Fixed
Amazon Linux 2023 kmod-nvidia-latest-dkms 2026-10-29 ALAS2023NVIDIA-2026-322 Fixed
Amazon Linux 2023 kmod-nvidia-open-dkms 2026-10-29 ALAS2023NVIDIA-2026-317 Fixed
Amazon Linux 2023 libnvidia-nscq 2026-11-02 ALAS2023NVIDIA-2026-318 Fixed
Amazon Linux 2023 libnvsdm 2026-11-02 ALAS2023NVIDIA-2026-321 Fixed
Amazon Linux 2023 nvidia-driver 2026-10-29 ALAS2023NVIDIA-2026-326 Fixed
Amazon Linux 2023 nvidia-fabricmanager 2026-11-02 ALAS2023NVIDIA-2026-319 Fixed
Amazon Linux 2023 nvidia-imex 2026-11-02 ALAS2023NVIDIA-2026-324 Fixed
Amazon Linux 2023 nvidia-kmod-common 2026-11-02 ALAS2023NVIDIA-2026-315 Fixed
Amazon Linux 2023 nvidia-modprobe 2026-11-02 ALAS2023NVIDIA-2026-320 Fixed
Amazon Linux 2023 nvidia-open 2026-10-29 ALAS2023NVIDIA-2026-314 Fixed
Amazon Linux 2023 nvidia-persistenced 2026-11-02 ALAS2023NVIDIA-2026-327 Fixed
Amazon Linux 2023 nvidia-settings 2026-11-02 ALAS2023NVIDIA-2026-328 Fixed
Amazon Linux 2023 nvidia-xconfig 2026-11-02 ALAS2023NVIDIA-2026-323 Fixed
Amazon Linux 2023 nvlink5 2026-11-02 ALAS2023NVIDIA-2026-325 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H