A flaw was found in the NVIDIA GPU display driver open-source kernel module. An unprivileged local user can trigger this vulnerability when importing a read-only buffer from another device via the Direct Memory Access Buffer (DMA-BUF) sharing framework, leading to improper preservation of memory access permissions. Successful exploitation can allow a local attacker to achieve privilege escalation, execute arbitrary code, cause a denial of service, or tamper with system data.
Last checked: 2026-10-01 04:41 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 00:00 UTC)
Fix evidence last checked: 2026-10-01 15:31 UTC
Debian 12 (Bookworm)
Debian Security Tracker · Observed 2026-10-01