NVIDIA Windows GPU driver: incorrect comparison in the kernel module

Impact

A comparison in the kernel module is wrong, so a bound or equality test does not reject the input it was meant to reject. The practical effect is that a validation step an attacker is expected to fail can be passed, opening whatever the check was protecting. NVIDIA lists outcomes up to code execution; the record gives no further detail, so treat it as a kernel-level validation failure reachable from a local Windows user.

Who can reach it

Local. A user process on an affected Windows host or guest with the NVIDIA driver installed.

What to do

Install the Windows driver update from NVIDIA bulletin 2026/5861; the record states no fixed version. The instance must be rebooted, so drain it before applying.

References

Related entries

• NVIDIA Windows GPU driver: type confusion in the kernel moduleCVE-2026-47583 · NVIDIA GPU Display Driver for Windows (kernel module)High
• NVIDIA Windows GPU driver: out-of-bounds read with no privileges required, leaking data and crashing the driverCVE-2026-47576 · NVIDIA GPU Display Driver for Windows (kernel module)High
• NVIDIA Windows GPU driver: incorrect buffer size calculation in the kernel mode layerCVE-2026-47578 · NVIDIA GPU Display Driver for Windows (kernel mode layer, buffer size calculation)High
• NVIDIA Windows GPU driver: use-after-free with a scope-changing impact beyond the vulnerable componentCVE-2026-47579 · NVIDIA GPU Display Driver for Windows (kernel mode driver)High
• NVIDIA Windows GPU driver: integer underflow in the kernel moduleCVE-2026-47585 · NVIDIA GPU Display Driver for Windows (kernel module, size arithmetic)High
• NVIDIA Linux GPU driver: incorrect authorization lets an unprivileged user write read-only memoryCVE-2026-47591 · NVIDIA GPU Display Driver for Linux (kernel mode layer, read-only memory authorization)High