目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%

CVE-2026-47581— NVIDIA Windows驱动内核模块加锁不当致拒绝服务

一分钟漏洞结论

影响对象
NVIDIA GeForce
利用判断
尚无明确在野利用证据,仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本;无法立即升级时,限制受影响服务暴露并加强监测。

NVIDIA Windows GPU 显示驱动程序在内核模块中存在一个漏洞,允许用户触发不正确的锁机制。成功利用该漏洞可能导致拒绝服务(DoS)攻击。

CVSS 5.5 · Medium

可能的 ATT&CK 技术 1 AI

T1499 · Endpoint Denial of Service

影响版本矩阵 13

厂商产品 版本范围状态
NVIDIA GeForce All driver versions prior to 610.60 affected
All driver versions prior to 616.56 affected
All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU arc affected
NVIDIA RTX, Quadro, NVS All driver versions prior to 610.88 affected
All driver versions prior to 616.92 affected
All driver versions prior to 582.78 affected
All driver versions prior to 596.86 affected
NVIDIA Tesla All driver versions prior to 596.86 affected
All driver versions prior to 596.86 affected
All driver versions prior to 616.92 affected
All driver versions prior to 610.88 affected
NVIDIA Virtual GPU Manager 596.38(All versions prior to and including vGPU 20.1) affected
582.51(All versions prior to and including vGPU 19.5) affected
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2026-47581 基础信息

漏洞信息

对漏洞内容有疑问?看看神龙的深度分析是否有帮助!
查看神龙十问 ↗

尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. A successful exploit of this vulnerability might lead to denial of service.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
加锁机制不恰当
来源: CVE Program / CVE List V5

受影响产品

厂商 产品 影响版本 CPE 订阅
NVIDIA GeForce All driver versions prior to 610.60 -
NVIDIA RTX, Quadro, NVS All driver versions prior to 610.88 -
NVIDIA GeForce All driver versions prior to 616.56 -
NVIDIA RTX, Quadro, NVS All driver versions prior to 616.92 -
NVIDIA GeForce All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected. -
NVIDIA RTX, Quadro, NVS All driver versions prior to 582.78 -
NVIDIA RTX, Quadro, NVS All driver versions prior to 596.86 -
NVIDIA Tesla All driver versions prior to 596.86 -
NVIDIA Tesla All driver versions prior to 596.86 -
NVIDIA Tesla All driver versions prior to 616.92 -
NVIDIA Tesla All driver versions prior to 610.88 -
NVIDIA Virtual GPU Manager 596.38(All versions prior to and including vGPU 20.1) -
NVIDIA Virtual GPU Manager 582.51(All versions prior to and including vGPU 19.5) -

二、漏洞 CVE-2026-47581 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-47581 的情报信息

请登录查看更多情报信息。

CVE-2026-47581 厂商安全公告 (2)

CVE-2026-47581 其他参考 (1)

同批安全公告 · NVIDIA · 2026-09-30 · 共 114 条

CVE-2026-47578 7.8 HIGH NVIDIA Windows驱动内核缓冲区计算错误致代码执行
CVE-2026-47550 7.8 HIGH NVIDIA Windows驱动内核空指针解引用漏洞
CVE-2026-47551 7.8 HIGH NVIDIA驱动内核层释放后使用漏洞
CVE-2026-47552 7.8 HIGH NVIDIA Linux驱动内核层越权漏洞
CVE-2026-47553 7.8 HIGH NVIDIA驱动越界写漏洞致代码执行及权限提升
CVE-2026-47556 7.8 HIGH NVIDIA驱动整数溢出致越界写漏洞
CVE-2026-47558 7.8 HIGH NVIDIA Linux驱动内核层双重释放漏洞
CVE-2026-47559 7.8 HIGH NVIDIA驱动内核层越界访问致代码执行漏洞
CVE-2026-47560 7.8 HIGH NVIDIA Linux驱动内核层释放后使用漏洞
CVE-2026-47561 7.8 HIGH NVIDIA Linux驱动内核越界写漏洞
CVE-2026-47563 7.8 HIGH NVIDIA Linux驱动内核空指针解引用漏洞
CVE-2026-47569 7.8 HIGH NVIDIA Linux驱动内核层类型混淆漏洞
CVE-2026-47570 7.8 HIGH NVIDIA Windows驱动CUDA库加载路径漏洞
CVE-2026-47571 7.8 HIGH NVIDIA Windows驱动本地提权漏洞
CVE-2026-47572 7.8 HIGH NVIDIA Linux驱动内核层类型混淆漏洞
CVE-2026-47573 7.8 HIGH NVIDIA NVAPI Windows越界写漏洞
CVE-2026-47575 7.8 HIGH NVIDIA Windows驱动整数溢出致代码执行漏洞
CVE-2026-47577 7.8 HIGH NVIDIA Windows驱动内核模块比较错误漏洞
CVE-2026-47591 7.8 HIGH NVIDIA Linux驱动内核层越权写漏洞
CVE-2026-47589 7.8 HIGH NVIDIA显卡驱动UAF漏洞致代码执行及权限提升

显示前 20 条,共 114 条。 查看全部 → →

IV. Related Vulnerabilities

V. Comments for CVE-2026-47581

暂无评论


发表评论