Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 01 Oct 2026 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Nvidia
Nvidia geforce Nvidia nvs Nvidia quadro Nvidia rtx Nvidia tesla |
|
| Vendors & Products |
Nvidia
Nvidia geforce Nvidia nvs Nvidia quadro Nvidia rtx Nvidia tesla |
Thu, 01 Oct 2026 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Privilege Escalation via DMA‑BUF Import Path in NVIDIA GPU Drivers | nvidia-driver: nvidia-driver: Privilege escalation via improper memory access permissions in DMA-BUF import |
| Weaknesses | CWE-281 | |
| Metrics |
threat_severity
|
threat_severity
|
Wed, 30 Sep 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Privilege Escalation via DMA‑BUF Import Path in NVIDIA GPU Drivers |
Wed, 30 Sep 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 30 Sep 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-only buffer from another device's DMA-BUF exporter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering. | |
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: nvidia
Published:
Updated: 2026-10-01T03:56:19.399Z
Reserved: 2026-05-19T19:55:50.277Z
Link: CVE-2026-47601
Updated: 2026-09-30T17:25:18.213Z
Status : Awaiting Analysis
Published: 2026-09-30T16:17:30.563
Modified: 2026-10-01T04:18:18.953
Link: CVE-2026-47601
OpenCVE Enrichment
Updated: 2026-10-01T11:45:07Z