Description
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2026-09-30
Score: 6.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Code execution or privilege escalation via numeric conversion flaw in kernel mode
Action: Immediate Patch
AI Analysis

Impact

The vulnerability in NVIDIA vGPU Virtual GPU Manager for Linux resides in a kernel mode numeric conversion where improper cast or truncation could be triggered by an attacker. This flaw may lead to code execution, denial of service, privilege escalation, information disclosure, or data tampering if successfully exploited. The weakness is categorized as a type of integer conversion error, where an attacker could manipulate values to cause undefined behavior in the kernel.

Affected Systems

This affect NVIDIA Virtual GPU Manager on Linux platforms. The product appears in repeated vendor listings, but no specific version information is provided in the CVE data. Administrators should check the NVIDIA product security page or run-time configuration to determine the installed vGPU Manager version.

Risk and Exploitability

The CVSS score of 6.7 indicates a moderate severity, and no EPSS score is provided, so current exploitation probability is unknown. The vulnerability is not listed in CISA KEV, suggesting it may not have been broadly exploited yet. The likely attack vector is exploitation via the kernel mode component, requiring either local privileges or an attacker with the ability to influence the vGPU Manager for an affected system. Once the flaw is triggered, the consequences may include full compromise of the host operating system.

Generated by OpenCVE AI on September 30, 2026 at 18:17 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Obtain and apply the latest NVIDIA Virtual GPU Manager update that addresses the kernel mode numeric conversion issue
  • If no update is available, restrict vGPU Manager access to trusted users and enforce least privilege for interacting processes
  • Monitor kernel logs for abnormal behavior and implement intrusion detection rules for unexpected kernel activity

Generated by OpenCVE AI on September 30, 2026 at 18:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia virtual Gpu Manager

Wed, 30 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
Title Numeric Conversion Vulnerability in NVIDIA vGPU Virtual GPU Manager Kernel Layer

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-681
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

Nvidia Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-01T03:55:47.277Z

Reserved: 2026-05-19T19:55:43.813Z

Link: CVE-2026-47539

cve-icon Vulnrichment

Updated: 2026-09-30T17:24:02.632Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:21.143

Modified: 2026-10-01T04:18:13.400

Link: CVE-2026-47539

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T18:45:05Z

Weaknesses
  • CWE-681

    Incorrect Conversion between Numeric Types