Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 30 Sep 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Privilege Escalation via DMA‑BUF Import Path in NVIDIA GPU Drivers |
Wed, 30 Sep 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 30 Sep 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-only buffer from another device's DMA-BUF exporter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering. | |
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: nvidia
Published:
Updated: 2026-09-30T17:29:30.886Z
Reserved: 2026-05-19T19:55:50.277Z
Link: CVE-2026-47601
Updated: 2026-09-30T17:25:18.213Z
Status : Awaiting Analysis
Published: 2026-09-30T16:17:30.563
Modified: 2026-09-30T18:18:36.407
Link: CVE-2026-47601
No data.
OpenCVE Enrichment
Updated: 2026-09-30T18:45:05Z
-
CWE-787
Out-of-bounds Write