Live › vulnerability › CVE-2026-65586
A non-privileged program can make improper GPU system calls to free a memory buffer still in use, then substitute another allocation. This lets it read and write arbitrary physical memory pages of the machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 02:28 UTC. All times on this page are UTC.
Systems with an NVIDIA GPU driver where untrusted local code can run as a non-privileged user, such as shared hosts, multi-tenant GPU servers or workstations with untrusted software. Single-user machines running only trusted software are less exposed. The sources do not name the affected driver versions.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages.
A memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of control (firmware) can be freed while in use. Software installed and run as a non-privileged user may replace that buffer with another and replace a shared resource (memory page address list) managed by the CPU thread of control (driver) leading to the GPU accessing memory not managed by the CPU thread of control (driver).
This page as .md · .json · in your agent: get_signal("CVE-2026-65586")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.