NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivile

Versions reported by the vendor

Affected version ranges reported by the assigning authority (nvidia). Independent of NVD's CPE analysis and usually ahead of it.

• NVIDIA GeForce

  • All driver versions prior to 610.60, All driver versions prior to 616.56, All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected., All driver versions prior to 615.71.09, All driver versions prior to 610.57.04, All driver versions prior to 595.91.07, All driver versions prior to 580.178.04affected

• NVIDIA Guest driver

  • 595.71.05(All versions prior to and including vGPU 20.1), 580.159.03(All versions prior to and including vGPU 19.5)affected

• NVIDIA RTX, Quadro, NVS

  • All driver versions prior to 610.88, All driver versions prior to 616.92, All driver versions prior to 582.78, All driver versions prior to 596.86, All driver versions prior to 615.71.09, All driver versions prior to 610.57.04, All driver versions prior to 595.91.07, All driver versions prior to 580.178.04affected

• NVIDIA Tesla

  • All driver versions prior to 596.86, All driver versions prior to 596.86, All driver versions prior to 616.92, All driver versions prior to 610.88, All driver versions prior to 615.71.09, All driver versions prior to 610.57.04, All driver versions prior to 595.91.07, All driver versions prior to 580.178.04affected

Other highest-scoring records for the same primary product.

• CVE-2025-23309NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to arbitrary denial of service, escalation
  32Monitor
• CVE-2026-47601NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unpri
  31Monitor
• CVE-2026-47600NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate
  31Monitor
• CVE-2026-47599NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause i
  31Monitor
• CVE-2026-47595NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memo
  31Monitor
• CVE-2026-47594NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by
  31Monitor

Root cause

After a memory region is freed, another reference pointing to it is still used. By then, the same region may have been allocated for different data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1free(dev->buf);2/* ... another thread is still running ... */3process(dev->buf);

1lock(&dev->lock);2free(dev->buf);3dev->buf = NULL;4unlock(&dev->lock);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.