A flaw was found in the NVIDIA GPU display driver. A local, unprivileged user can exploit this vulnerability by submitting an input/output control (ioctl) request with an unvalidated buffer size to the driver's kernel layer. This causes an out-of-bounds write in kernel memory, which may allow the attacker to execute arbitrary code with elevated privileges, crash the system leading to a Denial of Service (DoS), or tamper with sensitive data.
Last checked: 2026-10-01 04:41 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 00:00 UTC)
Fix evidence last checked: 2026-10-23 10:28 UTC
Debian 12 (Bookworm)
Debian Security Tracker · Observed 2026-10-01
SUSE Linux Enterprise Server 16
SUSE-SU-2026:24256 · Published 2026-10-15