NVIDIA GPU driver for Linux: read-only memory becomes writable because permissions are not preserved
Impact
The kernel mode layer loses memory protection attributes, letting an unprivileged user write to memory that should be read-only, with code execution and privilege escalation as the stated outcomes. The scope is marked changed (S:C), so the damage reaches beyond the attacker's own boundary. The vector is AV:P - NVIDIA scored this as requiring physical access - which on a datacenter node means an operator or anyone with hands-on access in the cage rather than a remote tenant, so it ranks below the other 7.0 items for most fleets.
Who can reach it
Low-privileged local user, scored by NVIDIA as requiring physical access (AV:P) and high attack complexity.
What to do
Update the Linux GPU display driver and guest driver to the fixed branch in NVIDIA bulletin 2026/5861. Drain the node and reboot to reload the kernel modules. Given the physical-access vector, this can usually ride along with your next scheduled driver roll rather than an emergency window.
References
Related entries
- NVIDIA open GPU kernel module: use-after-free in the event delivery path races file closeCVE-2026-47598 · NVIDIA open GPU kernel module (asynchronous event delivery vs file close race)High
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)CVE-2026-53329 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)High
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)CVE-2026-64219 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)High
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds writeCVE-2022-28185 · NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko)Medium
- GeForce Experience installer: Local privesc during installCVE-2022-31611 · GeForce Experience installerMedium
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A kernel helper maps more physical pages than wereCVE-2022-34674 · NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.