{"id":"CVE-2026-47504","published":"2026-09-30T16:17:15.423","lastModified":"2026-10-01T04:18:09.050","description":"NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible to type confusion. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-843"],"vendors":[],"products":[],"references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47504","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47504","tags":[]}],"exploitRefs":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is a type confusion vulnerability in the NVIDIA Linux GPU Display Driver's NGX updater, which can lead to code execution, denial of service, information disclosure, or data tampering. This matters because an attacker could exploit it to gain unauthorized access or disrupt system operations.","exploitability":"Exploitation requires an attacker to have access to an outdated system with the vulnerable driver. The difficulty of exploitation depends on the system's security posture and network exposure.","blast_radius":"If exploited, the impact could be severe, including unauthorized code execution, system crashes, data leaks, or tampered data, affecting both the system's availability and integrity.","remediation":"Upgrade to the latest version of the NVIDIA Linux GPU Display Driver, specifically version 555.67.01 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dos","info-disc","data-tamper"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:42:42.796Z"}}