CVE-2026-47597
Quick assessment
Affected
NVIDIA GeForce
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NVIDIA 面向 Windows 和 Linux 的 GPU 显示驱动程序在开源内核模块“资源服务器”（Resource Server）中存在一个漏洞。由于映射清理路径中缺少自引用保护机制，非特权本地用户可能触发“释放后使用”（use-after-free）漏洞。成功利用该漏洞可能导致代码执行、权限提升、拒绝服务、信息泄露以及数据篡改等后果。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-47597
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free through a missing self-reference guard in the map cleanup path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NVIDIA | GeForce | All driver versions prior to 610.60 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 610.88 | - |
|
| NVIDIA | GeForce | All driver versions prior to 616.56 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 616.92 | - |
|
| NVIDIA | GeForce | All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected. | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 582.78 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 596.86 | - |
|
| NVIDIA | Tesla | All driver versions prior to 596.86 | - |
|
| NVIDIA | Tesla | All driver versions prior to 596.86 | - |
|
| NVIDIA | Tesla | All driver versions prior to 616.92 | - |
|
| NVIDIA | Tesla | All driver versions prior to 610.88 | - |
|
| NVIDIA | GeForce | All driver versions prior to 615.71.09 | - |
|
| NVIDIA | GeForce | All driver versions prior to 610.57.04 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 615.71.09 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 610.57.04 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 595.91.07 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 580.178.04 | - |
|
| NVIDIA | Tesla | All driver versions prior to 615.71.09 | - |
|
| NVIDIA | Tesla | All driver versions prior to 610.57.04 | - |
|
| NVIDIA | Tesla | All driver versions prior to 595.91.07 | - |
|
| NVIDIA | Tesla | All driver versions prior to 580.178.04 | - |
|
| NVIDIA | GeForce | All driver versions prior to 595.91.07 | - |
|
| NVIDIA | GeForce | All driver versions prior to 580.178.04 | - |
|
| NVIDIA | Guest driver | 595.71.05(All versions prior to and including vGPU 20.1) | - |
|
| NVIDIA | Guest driver | 580.159.03(All versions prior to and including vGPU 19.5) | - |
|
II. Public POCs for CVE-2026-47597
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-47597
请登录查看更多情报信息。
Other References for CVE-2026-47597 (3)
Same Patch Batch · NVIDIA · 2026-09-30 · 114 CVEs total
| CVE-2026-47577 | 7.8 HIGH | CVE-2026-47577 |
| CVE-2026-47548 | 7.8 HIGH | CVE-2026-47548 |
| CVE-2026-47550 | 7.8 HIGH | CVE-2026-47550 |
| CVE-2026-47551 | 7.8 HIGH | CVE-2026-47551 |
| CVE-2026-47552 | 7.8 HIGH | NVIDIA Linux驱动内核层越权漏洞 |
| CVE-2026-47553 | 7.8 HIGH | NVIDIA驱动越界写漏洞致代码执行及权限提升 |
| CVE-2026-47556 | 7.8 HIGH | CVE-2026-47556 |
| CVE-2026-47558 | 7.8 HIGH | CVE-2026-47558 |
| CVE-2026-47559 | 7.8 HIGH | CVE-2026-47559 |
| CVE-2026-47560 | 7.8 HIGH | NVIDIA Linux驱动内核层释放后使用漏洞 |
| CVE-2026-47561 | 7.8 HIGH | CVE-2026-47561 |
| CVE-2026-47563 | 7.8 HIGH | CVE-2026-47563 |
| CVE-2026-47569 | 7.8 HIGH | NVIDIA Linux驱动内核层类型混淆漏洞 |
| CVE-2026-47570 | 7.8 HIGH | CVE-2026-47570 |
| CVE-2026-47571 | 7.8 HIGH | NVIDIA Windows驱动本地提权漏洞 |
| CVE-2026-47572 | 7.8 HIGH | CVE-2026-47572 |
| CVE-2026-47573 | 7.8 HIGH | NVIDIA NVAPI Windows越界写漏洞 |
| CVE-2026-47575 | 7.8 HIGH | CVE-2026-47575 |
| CVE-2026-47592 | 7.8 HIGH | CVE-2026-47592 |
| CVE-2026-47590 | 7.8 HIGH | NVIDIA驱动UAF漏洞致代码执行及权限提升 |
Showing top 20 of 114 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-47597
No comments yet