CVE-2026-47602: 
NVIDIA Graphics Driver vulnerability analysis and mitigation

CVE-2026-47602 is an untrusted pointer dereference vulnerability in the NVIDIA GPU Display Driver kernel mode driver for Windows and Linux. A local user with standard privileges can trigger the driver to dereference an untrusted pointer, potentially leading to denial of service and information disclosure. The vulnerability was disclosed on September 30, 2026, as part of NVIDIA's Security Bulletin 5861 (GPU Display Driver – September 2026). Affected products include NVIDIA GeForce, RTX/Quadro/NVS, Tesla, and Virtual GPU Manager across multiple driver branches. It carries a CVSS v3.1 base score of 7.1 (High) (Github Advisory, Red Hat Bugzilla).

The vulnerability is classified under CWE-822 (Untrusted Pointer Dereference) and CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The flaw resides in the NVIDIA GPU kernel mode driver, where user-supplied or otherwise untrusted pointer values are dereferenced without adequate validation, allowing a local attacker to direct the kernel driver to access arbitrary memory locations. Exploitation requires only low privileges and no user interaction, with a local attack vector and low attack complexity. No public technical write-ups or proof-of-concept code have been identified at this time (Github Advisory, NVIDIA Product Security).

Successful exploitation can result in two primary consequences: denial of service (crashing the GPU display driver) and information disclosure (reading sensitive data from GPU driver kernel memory). A local user with standard privileges can trigger these outcomes without any user interaction, potentially exposing kernel memory contents and disrupting GPU-dependent workloads. Integrity is not impacted, and there is no evidence of lateral movement capability; however, in multi-tenant or virtualized environments (e.g., systems running Virtual GPU Manager), the impact scope could extend to other users sharing GPU resources (Github Advisory, Red Hat Bugzilla).

There is no evidence of active in-the-wild exploitation or publicly available proof-of-concept code for CVE-2026-47602 at this time. The NVD SSVC assessment classifies exploitation as "none" and the vulnerability as not automatable. The EPSS score is approximately 0.16%, indicating a low near-term probability of exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported (Github Advisory, Red Hat Bugzilla).

NVIDIA has released patched driver versions across all affected product lines as part of Security Bulletin 5861. Administrators should update to the following minimum versions based on their product:

• GeForce: 580.178.04 (Linux), 582.78 (Windows, Maxwell/Volta/Pascal only), 595.91.07, 610.57.04, 610.60, 615.71.09, or 616.56
• RTX, Quadro, NVS: 580.178.04, 582.78, 595.91.07, 596.86, 610.57.04, 610.88, 615.71.09, or 616.92
• Tesla: 580.178.04, 595.91.07, 596.86, 610.57.04, 610.88, 615.71.09, or 616.92
• Virtual GPU Manager: vGPU 19.6+ (beyond 580.159.01/582.51) or vGPU 20.2+ (beyond 595.71.03/596.38)

Prioritize patching systems where non-privileged users have local access to GPU resources, such as shared workstations or virtualized GPU environments. Monitor for unusual GPU driver crashes as a precautionary measure (NVIDIA Product Security, HP Advisory).

Gaming on Linux covered the September 2026 NVIDIA security bulletin, noting the breadth of GPU issues addressed across multiple product lines (Gaming on Linux). HP issued its own advisory (HPSBHF04158) referencing the vulnerability for affected HP products with NVIDIA GPUs (HP Advisory). No significant researcher commentary or broader community discussion has been identified beyond standard vulnerability tracking coverage.