The vulnerability CVE-2026-47504 affects the NVIDIA Linux GPU Display Driver, specifically the NGX updater component. It arises from a type confusion issue (CWE-843) in an outdated embedded cryptographic library. This flaw could be exploited locally to execute arbitrary code, cause denial of service, disclose sensitive information, or tamper with data. The CVSS 3.1 score is 7.8, indicating high severity, with attack vector local, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation may lead to code execution on the affected system, denial of service conditions, unauthorized disclosure of information, or unauthorized modification of data. The attack requires local access with low privileges and no user interaction. The vulnerability impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor NVIDIA advisories for updates and apply patches once available.