{"id":"CVE-2026-65586","kind":"vulnerability","aliases":["CVE-2026-65586"],"related":[],"title":"NVIDIA GPU driver: local user can read and write arbitrary physical memory","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages.\n\n\n\nA memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of control (firmware) can be freed while in use. Software installed and run as a non-privileged user may replace that buffer with another and replace a shared resource (memory page address list) managed by the CPU thread of control (driver) leading to the GPU accessing memory not managed by the CPU thread of control (driver).","summary":"A non-privileged program can make improper GPU system calls to free a memory buffer still in use, then substitute another allocation. This lets it read and write arbitrary physical memory pages of the machine.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["gpu-driver","infrastructure","linux","nvidia","windows"],"not_affected_if":["no-untrusted-local-code","single-user-trusted-software"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-30T02:17:09+00:00","first_seen_at":"2026-10-30T02:28:06+00:00","triaged_at":"2026-10-30T02:30:12+00:00","updated_at":"2026-10-30T02:30:12+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-30T02:30:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"NVIDIA GPU driver: local user can read and write arbitrary physical memory","impact":"high","summary":"A non-privileged program can make improper GPU system calls to free a memory buffer still in use, then substitute another allocation. This lets it read and write arbitrary physical memory pages of the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["nvidia","gpu-driver","linux","windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local code gains arbitrary physical memory read and write access","analyst_note":"Check NVIDIA security bulletin and NVD entry CVE-2026-65586 for affected driver branches and fixed versions.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-untrusted-local-code","single-user-trusted-software"],"who_is_affected":"Systems with an NVIDIA GPU driver where untrusted local code can run as a non-privileged user, such as shared hosts, multi-tenant GPU servers or workstations with untrusted software. Single-user machines running only trusted software are less exposed. The sources do not name the affected driver versions.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000658,"input_tokens":4208,"output_tokens":475,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-65586':15A,18A 'access':112C,163C 'address':149C 'alloc':48B,88C 'anoth':47B,87C,141C 'arbitrari':10A,55B,91C 'buffer':41B,102C,139C 'call':36B,77C 'caus':90C 'conduct':73C 'control':109C,118C,157C,172C 'cpu':106C,154C,169C 'cve':13A,16A 'driver':3A,21B,110C,158C,173C 'firmwar':119C 'free':38B,79C 'freed':122C 'gpu':2A,20B,34B,75C,115C,162C 'gpu-driv':19B 'improp':33B,74C 'infrastructur':22B 'instal':63C,127C 'lead':159C 'let':50B 'linux':23B 'list':150C 'local':4A 'machin':61B 'make':32B 'manag':103C,151C,166C 'may':72C,136C 'memori':12A,40B,57B,80C,92C,98C,101C,147C,164C 'non':28B,69C,133C 'non-privileg':27B,68C,132C 'nvidia':1A,24B 'page':58B,99C,148C 'physic':11A,56B,97C 'privileg':29B,70C,134C 'program':30B 'read':7A,52B,93C 'replac':85C,137C,143C 'resourc':146C 'run':65C,129C 'share':145C 'softwar':62C,126C 'still':42B,82C 'substitut':46B 'system':35B,76C 'thread':107C,116C,155C,170C 'use':44B,84C,125C 'user':5A,71C,135C 'window':25B 'write':9A,54B,95C","nicknames":[],"mitigations":[],"who_affected":"Systems with an NVIDIA GPU driver where untrusted local code can run as a non-privileged user, such as shared hosts, multi-tenant GPU servers or workstations with untrusted software. Single-user machines running only trusted software are less exposed. The sources do not name the affected driver versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T02:17:09+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-65586","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65586","severity":null,"published_at":"2026-10-30T02:17:09+00:00","modified_at":"2026-10-30T02:17:09+00:00","first_seen_at":"2026-10-30T02:28:06+00:00","fetched_at":"2026-10-30T02:28:06+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}