NVIDIA Display Driver for Linux Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in the NVIDIA Display Driver for Linux. This vulnerability allows an attacker to cause a use-after-free condition, which could lead to a denial-of-service, escalation of privileges, information disclosure, data tampering, and code execution.

Impact

Exploitation of this vulnerability could result in a use-after-free condition, allowing for potential denial-of-service, privilege escalation, information disclosure, data tampering, and code execution.

Remediation

Users can update to NVIDIA Display Driver versions 595.71.05, 580.159.03, or 535.309.01 to address this vulnerability. For those using the NVIDIA Guest Driver, versions 595.58.03 (up to and including vGPU 20.0), 580.126.09 (up to and including vGPU 19.4), or 535.288.01 (up to and including vGPU 16.13) are recommended. Additionally, users of NVIDIA Virtual GPU Manager should update to version 595.58.02 (up to and including the March 2026 release) or 580.126.08 (up to and including vGPU 19.4).