NVIDIA Linux GPU Display Driver CVE-2026-47595 (CVSS 7.8, 'Bad UVM'): unprivileged write to read-only kernel memory — researcher path to host root / container escape; fixed in Sept 2026 driver branches (bulletin updated 13 Oct)

NVIDIA Security Bulletin for GPU Display Driver — September 2026 (a_id 5861, initial release 30 September, revision 02 on 13 October 2026) includes CVE-2026-47595: in the Linux kernel-mode layer an unprivileged user can write to read-only memory because permissions are not preserved (CWE-281). NVIDIA rates it CVSS 3.1 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) with impacts of code execution, privilege escalation, DoS, information disclosure and data tampering. Wire coverage on 15–16 October (The Hacker News ThreatsDay) highlighted researcher write-ups nicknamed 'Bad UVM' showing a path from nvidia-persistenced / UVM abuse to host root and GPU-enabled container escape — the same permission-preservation class as the CVE text. CVE-2026-47595 is on the Linux R615/R610/R595/R580 fix lists in the bulletin. Patch Linux GeForce/RTX/Quadro/Tesla branches to 615.71.09, 610.57.04, 595.91.07 or 580.178.04 as applicable; vGPU Linux guest drivers prior to 20.2 / 19.6 also list this CVE. Primary: NVIDIA bulletin; wire: THN ThreatsDay.

Product

NVIDIA GPU Display Driver for Linux (GeForce, RTX/Quadro/NVS, Tesla); NVIDIA vGPU Linux guest drivers where listed

Versions

Linux driver branches prior to fixed builds: GeForce/RTX/Quadro/Tesla R615 < 615.71.09, R610 < 610.57.04, R595 < 595.91.07, R580 < 580.178.04. vGPU Linux guest: all through 20.1 (595.71.05) → 20.2 (595.91.07); through 19.5 (580.159.03) → 19.6 (580.178.04). See bulletin tables for the full multi-CVE package.

CVSS

7.8 (CVSS 3.1, NVIDIA)

Exploited in Australia?

unknown

Patch to

Install the fixed NVIDIA Linux driver for your branch (615.71.09 / 610.57.04 / 595.91.07 / 580.178.04) or the matching vGPU guest/manager update from the Licensing Portal, then reboot. Prioritise multi-tenant GPU hosts and GPU-enabled containers where untrusted workloads can talk to nvidia device nodes. Do not treat this as a Windows-only bulletin — CVE-2026-47595 is Linux-specific in the table.

Primary: NVIDIA — Security Bulletin: NVIDIA GPU Display Driver — September 2026 (a_id 5861; rev 02 updated 13 Oct 2026) · Vendor: NVIDIA Product Security · CVE: CVE-2026-47595 · The Hacker News — ThreatsDay: NVIDIA GPU driver container escape / Bad UVM (CVE-2026-47595) (16 Oct 2026)

vulnerabilities cloud ai