Technical impact
The vulnerability in NVIDIA vGPU Virtual GPU Manager for Linux resides in a kernel mode numeric conversion where improper cast or truncation could be triggered by an attacker. This flaw may lead to code execution, denial of service, privilege escalation, information disclosure, or data tampering if successfully exploited. The weakness is categorized as a type of integer conversion error, where an attacker could manipulate values to cause undefined behavior in the kernel.
Affected Systems
This affect NVIDIA Virtual GPU Manager on Linux platforms. The product appears in repeated vendor listings, but no specific version information is provided in the CVE data. Administrators should check the NVIDIA product security page or run-time configuration to determine the installed vGPU Manager version.
Risk and Exploitability
The CVSS score of 6.7 indicates a moderate severity, and no EPSS score is provided, so current exploitation probability is unknown. The vulnerability is not listed in CISA KEV, suggesting it may not have been broadly exploited yet. The likely attack vector is exploitation via the kernel mode component, requiring either local privileges or an attacker with the ability to influence the vGPU Manager for an affected system. Once the flaw is triggered, the consequences may include full compromise of the host operating system.
