Amazon Linux 2023 : nvidia-modprobe (ALAS2023NVIDIA-2026-320)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Amazon Linux 2023 Security Advisory ALAS2023NVIDIA-2026-320.
##

include('compat.inc');

if (description)
{
  script_id(373468);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/29");

  script_cve_id(
    "CVE-2026-47489",
    "CVE-2026-47491",
    "CVE-2026-47492",
    "CVE-2026-47494",
    "CVE-2026-47500",
    "CVE-2026-47501",
    "CVE-2026-47502",
    "CVE-2026-47504",
    "CVE-2026-47507",
    "CVE-2026-47508",
    "CVE-2026-47509",
    "CVE-2026-47510",
    "CVE-2026-47511",
    "CVE-2026-47512",
    "CVE-2026-47513",
    "CVE-2026-47514",
    "CVE-2026-47515",
    "CVE-2026-47516",
    "CVE-2026-47517",
    "CVE-2026-47518",
    "CVE-2026-47522",
    "CVE-2026-47523",
    "CVE-2026-47524",
    "CVE-2026-47525",
    "CVE-2026-47526",
    "CVE-2026-47527",
    "CVE-2026-47528",
    "CVE-2026-47529",
    "CVE-2026-47530",
    "CVE-2026-47531",
    "CVE-2026-47532",
    "CVE-2026-47533",
    "CVE-2026-47534",
    "CVE-2026-47537",
    "CVE-2026-47538",
    "CVE-2026-47540",
    "CVE-2026-47542",
    "CVE-2026-47543",
    "CVE-2026-47545",
    "CVE-2026-47546",
    "CVE-2026-47547",
    "CVE-2026-47548",
    "CVE-2026-47549",
    "CVE-2026-47551",
    "CVE-2026-47552",
    "CVE-2026-47553",
    "CVE-2026-47554",
    "CVE-2026-47555",
    "CVE-2026-47556",
    "CVE-2026-47557",
    "CVE-2026-47558",
    "CVE-2026-47559",
    "CVE-2026-47560",
    "CVE-2026-47561",
    "CVE-2026-47562",
    "CVE-2026-47563",
    "CVE-2026-47565",
    "CVE-2026-47566",
    "CVE-2026-47567",
    "CVE-2026-47568",
    "CVE-2026-47569",
    "CVE-2026-47572",
    "CVE-2026-47586",
    "CVE-2026-47587",
    "CVE-2026-47588",
    "CVE-2026-47589",
    "CVE-2026-47590",
    "CVE-2026-47591",
    "CVE-2026-47592",
    "CVE-2026-47594",
    "CVE-2026-47595",
    "CVE-2026-47596",
    "CVE-2026-47597",
    "CVE-2026-47598",
    "CVE-2026-47599",
    "CVE-2026-47600",
    "CVE-2026-47601",
    "CVE-2026-47602",
    "CVE-2026-47603",
    "CVE-2026-47604"
  );
  script_xref(name:"IAVA", value:"2026-A-1071");

  script_name(english:"Amazon Linux 2023 : nvidia-modprobe (ALAS2023NVIDIA-2026-320)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Amazon Linux 2023 host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-320 advisory.

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on
    read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47489)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the
    underlying memory is reused. A successful exploit of this vulnerability might lead to code execution,
    denial of service, escalation of privileges, information disclosure, and data tampering. (CVE-2026-47491)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where
    an attacker can cause improper access control. A successful exploit of this vulnerability might lead to
    denial of service. (CVE-2026-47492)

    NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format
    string issue. A successful exploit of this vulnerability might lead to code execution, escalation of
    privileges, data tampering, denial of service, and information disclosure. (CVE-2026-47494)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where
    improper cleanup of reference counts during error paths could lead to a use-after-free condition. A
    successful exploit of this vulnerability might lead to code execution, denial of service, escalation of
    privileges, information disclosure, and data tampering. (CVE-2026-47500)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could
    cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup. A
    successful exploit of this vulnerability might lead to code execution, denial of service, escalation of
    privileges, information disclosure, and data tampering. (CVE-2026-47501)

    NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer,
    where a guest user could cause an integer overflow leading to memory corruption. A successful exploit of
    this vulnerability might lead to code execution, denial of service, escalation of privileges, information
    disclosure, and data tampering. (CVE-2026-47502)

    NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded
    cryptographic library is susceptible to type confusion. A successful exploit of this vulnerability might
    lead to code execution, denial of service, information disclosure, or data tampering. (CVE-2026-47504)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause an out-of-bounds array access. A successful exploit of this vulnerability might lead to
    code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47507)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause an incorrect conversion between numeric types. A successful exploit of this vulnerability
    might lead to code execution, denial of service, escalation of privileges, information disclosure, and
    data tampering. (CVE-2026-47508)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47509)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause an integer overflow leading to an out-of-bounds write to GPU memory. A successful exploit
    of this vulnerability might lead to code execution, denial of service, escalation of privileges,
    information disclosure, and data tampering. (CVE-2026-47510)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47511)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause an out-of-bounds read leading to kernel information disclosure. A successful exploit of
    this vulnerability might lead to code execution, denial of service, escalation of privileges, information
    disclosure, and data tampering. (CVE-2026-47512)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause an out-of-bounds read from kernel heap memory. A successful exploit of this vulnerability
    might lead to code execution, denial of service, escalation of privileges, information disclosure, and
    data tampering. (CVE-2026-47513)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause exposure of kernel stack contents including return addresses and pointers. A successful
    exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges,
    information disclosure, and data tampering. (CVE-2026-47514)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could cause an out-of-bounds read via an unbounded string operation. A successful exploit of this
    vulnerability might lead to code execution, denial of service, escalation of privileges, information
    disclosure, and data tampering. (CVE-2026-47515)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could
    cause a use-after-free. A successful exploit of this vulnerability might lead to code execution,
    escalation of privileges, data tampering, denial of service, and information disclosure. (CVE-2026-47516)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user
    may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this
    vulnerability might lead to denial of service. (CVE-2026-47517)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller
    component, where incorrect permission assignment for a critical resource allows an attacker with
    privileged local access to modify protected memory that should be restricted. A successful exploit of this
    vulnerability might lead to code execution and escalation of privileges. (CVE-2026-47518)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause improper input validation. A successful exploit of this vulnerability might lead to
    code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47522)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47523)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47524)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an improper validation of an array index. A successful exploit of this vulnerability
    might lead to code execution, denial of service, escalation of privileges, information disclosure, and
    data tampering. (CVE-2026-47525)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker
    could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of
    service. (CVE-2026-47526)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker
    could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47527)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker
    could cause an access of an uninitialized pointer. A successful exploit of this vulnerability might lead
    to code execution, denial of service, escalation of privileges, information disclosure, and data
    tampering. (CVE-2026-47528)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker
    could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47529)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47530)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to
    denial of service. (CVE-2026-47531)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47532)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an improper validation of an array index. A successful exploit of this vulnerability
    might lead to code execution, denial of service, escalation of privileges, information disclosure, and
    data tampering. (CVE-2026-47533)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause a divide by zero. A successful exploit of this vulnerability might lead to denial of
    service. (CVE-2026-47534)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker
    could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47537)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker
    could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47538)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an integer underflow. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47540)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause improper input validation. A successful exploit of this vulnerability might lead to
    code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47542)

    VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause improper input validation. A successful exploit of this vulnerability might lead to
    code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47543)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47545)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker
    could cause improper input validation. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47546)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker
    could cause improper input validation. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47547)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47548)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged
    local user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead
    to denial of service. (CVE-2026-47549)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a
    user could cause a use-after-free. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47551)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could bypass an authorization check and modify privileged configuration. A successful
    exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges,
    information disclosure, and data tampering. (CVE-2026-47552)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could cause an out-of-bounds write. A successful exploit of this vulnerability might
    lead to code execution, denial of service, escalation of privileges, information disclosure, and data
    tampering. (CVE-2026-47553)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper
    verification of cryptographic signatures may cause signature verification to be bypassed under memory
    pressure. A successful exploit of this vulnerability might lead to denial of service and data tampering.
    (CVE-2026-47554)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a
    user could cause uninitialized kernel memory to be copied back to userspace. A successful exploit of this
    vulnerability might lead to information disclosure. (CVE-2026-47555)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could cause an integer overflow that leads to an out-of-bounds write. A successful
    exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges,
    information disclosure, and data tampering. (CVE-2026-47556)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might
    lead to denial of service. (CVE-2026-47557)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could cause a double-free of imported memory state. A successful exploit of this
    vulnerability might lead to code execution, denial of service, escalation of privileges, information
    disclosure, and data tampering. (CVE-2026-47558)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a
    user could access memory belonging to another user's process. A successful exploit of this vulnerability
    might lead to code execution, escalation of privileges, data tampering, denial of service, and information
    disclosure. (CVE-2026-47559)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to
    code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47560)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an
    ioctl input buffer is not validated, allowing an unprivileged caller to trigger an out-of-bounds write in
    kernel memory. A successful exploit of this vulnerability might lead to code execution, denial of service,
    escalation of privileges, information disclosure, and data tampering. (CVE-2026-47561)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could
    inject crafted text into the kernel log because the supplied version string is not properly sanitized. A
    successful exploit of this vulnerability might lead to denial of service and data tampering.
    (CVE-2026-47562)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could
    cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to code execution,
    denial of service, escalation of privileges, information disclosure, and data tampering. (CVE-2026-47563)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privileged
    user could trigger a race condition that leads to an out-of-bounds write. A successful exploit of this
    vulnerability might lead to code execution, denial of service, escalation of privileges, information
    disclosure, and data tampering. (CVE-2026-47565)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could cause a memory leak in error paths leading to kernel memory exhaustion. A
    successful exploit of this vulnerability might lead to denial of service. (CVE-2026-47566)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could
    cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful
    exploit of this vulnerability might lead to denial of service. (CVE-2026-47567)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could
    cause uncontrolled kernel log generation by repeatedly invoking an interface that emits unrate-limited
    error messages. A successful exploit of this vulnerability might lead to denial of service.
    (CVE-2026-47568)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could
    cause a type confusion via a handle recycle race. A successful exploit of this vulnerability might lead to
    code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47569)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could
    cause type confusion. A successful exploit of this vulnerability might lead to code execution, denial of
    service, escalation of privileges, information disclosure, and data tampering. (CVE-2026-47572)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where an
    attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47586)

    NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-
    after-free. A successful exploit of this vulnerability might lead to code execution, escalation of
    privileges, denial of service, information disclosure, and data tampering. (CVE-2026-47587)

    NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-
    after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability
    might lead to code execution, escalation of privileges, denial of service and information disclosure.
    (CVE-2026-47588)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may
    cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this
    vulnerability might lead to code execution, escalation of privileges, denial of service, and information
    disclosure. (CVE-2026-47589)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may
    cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this
    vulnerability might lead to code execution, escalation of privileges, denial of service, and information
    disclosure. (CVE-2026-47590)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write
    access to memory marked read-only. A successful exploit of this vulnerability might lead to code
    execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2026-47591)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead
    to code execution, denial of service, escalation of privileges, information disclosure, and data
    tampering. (CVE-2026-47592)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may
    cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this
    vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering,
    and information disclosure. (CVE-2026-47594)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user can write to read-only memory because the memory's permissions are not preserved. A
    successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of
    service, information disclosure, and data tampering. (CVE-2026-47595)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an
    unprivileged user can write to read-only memory because the memory's permissions are not preserved. A
    successful exploit of this vulnerability might lead to code execution and escalation of privileges.
    (CVE-2026-47596)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module
    Resource Server where an unprivileged local user could cause a use-after-free through a missing self-
    reference guard in the map cleanup path. A successful exploit of this vulnerability might lead to code
    execution, escalation of privileges, denial of service, information disclosure, and data tampering.
    (CVE-2026-47597)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event
    delivery path where an unprivileged local user could cause a use-after-free through a race between
    asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code
    execution, escalation of privileges, denial of service, information disclosure, and data tampering.
    (CVE-2026-47598)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an
    unprivileged local user could cause improper preservation of memory access permissions during DMA mapping.
    A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial
    of service, information disclosure, and data tampering. (CVE-2026-47599)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an
    error-handling path could operate on an improperly initialized resource. A successful exploit of this
    vulnerability might lead to code execution, escalation of privileges, denial of service, information
    disclosure, and data tampering. (CVE-2026-47600)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module
    DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access
    permissions when importing a read-only buffer from another device's DMA-BUF exporter. A successful exploit
    of this vulnerability might lead to code execution, escalation of privileges, denial of service,
    information disclosure, and data tampering. (CVE-2026-47601)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a
    local user can cause the driver to dereference an untrusted pointer. A successful exploit of this
    vulnerability might lead to denial of service and information disclosure. (CVE-2026-47602)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a
    local user may access another process's GPU channel state due to missing authorization checks. A
    successful exploit of this vulnerability might lead to information disclosure. (CVE-2026-47603)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a
    local user may access another process's GPU channel state due to missing authorization checks. A
    successful exploit of this vulnerability might lead to information disclosure. (CVE-2026-4 ...

  Please note that the description has been truncated due to length. Please refer to vendor advisory for the full
description.

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com//AL2023/ALAS2023NVIDIA-2026-320.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/faqs.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47489.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47491.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47492.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47494.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47500.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47501.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47502.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47504.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47507.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47508.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47509.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47510.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47511.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47512.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47513.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47514.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47515.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47516.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47517.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47518.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47522.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47523.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47524.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47525.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47526.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47527.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47528.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47529.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47530.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47531.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47532.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47533.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47534.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47537.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47538.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47540.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47542.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47543.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47545.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47546.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47547.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47548.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47549.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47551.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47552.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47553.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47554.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47555.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47556.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47557.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47558.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47559.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47560.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47561.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47562.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47563.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47565.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47566.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47567.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47568.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47569.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47572.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47586.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47587.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47588.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47589.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47590.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47591.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47592.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47594.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47595.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47596.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47597.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47598.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47599.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47600.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47601.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47602.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47603.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-47604.html");
  script_set_attribute(attribute:"solution", value:
"Run 'dnf update nvidia-modprobe --releasever latest' or
  or 'dnf update --advisory ALAS2023NVIDIA-2026-320 --releasever latest' to update your system.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-47601");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/30");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/10/29");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/29");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:nvidia-modprobe");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux:2023");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Amazon Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list");

  exit(0);
}

include("rpm2.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var alas_release = get_kb_item("Host/AmazonLinux/release");
if (isnull(alas_release) || !strlen(alas_release)) audit(AUDIT_OS_NOT, "Amazon Linux");
var os_ver = pregmatch(pattern: "^AL(A|\d+|-\d+)", string:alas_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux");
os_ver = os_ver[1];
if (os_ver != "-2023")
{
  if (os_ver == 'A') os_ver = 'AMI';
  audit(AUDIT_OS_NOT, "Amazon Linux 2023", "Amazon Linux " + os_ver);
}

if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var pkgs = [
    {'reference':'nvidia-modprobe-595.91.07-1.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  var cves = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
  if (reference && _release && (!exists_check || rpm_exists(release:_release, rpm:exists_check))) {
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "nvidia-modprobe");
}