CVE-2026-47541

NVIDIA vGPU Virtual GPU Manager Kernel Out‑of‑Bounds Write Enabling Code Execution

View on CVE.org
Published Sep 30, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Analysis

AI-generated

Technical impact

NVIDIA's Virtual GPU Manager for Linux contains a kernel‑mode out‑of‑bounds write bug. A correctly crafted request can overwrite arbitrary kernel memory, possibly allowing an attacker to execute arbitrary code, crash the system, or modify data integrity.

Affected Systems

The vulnerability affects NVIDIA's Virtual GPU Manager for Linux. No specific version numbers are listed in the advisory, so all versions installed prior to a vendor patch are potentially vulnerable.

Risk and Exploitability

The CVSS score of 7.8 marks this as a High severity flaw, and although an EPSS score is not available, the KEV status indicates it is not listed in the CISA KEV catalog. The exploit could enable privilege escalation or code execution. The likely attack vector inferred from the description is a local or privileged user executing a specially crafted operation against the kernel mode layer of the vGPU manager. Security teams should treat this as a high‑risk vulnerability pending a vendor update.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Contact NVIDIA for the latest vulnerability patch or release.
  • Upgrade the Virtual GPU Manager to a version that contains the fix.
  • Apply system hardening such as disabling unnecessary virtual‑GPU features and enforcing least privilege for processes that interact with the vGPU manager.

Generated by OpenCVE AI on September 30, 2026 at 18:19 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Nvidia
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia virtual Gpu Manager
Type Values Removed Values Added
Title NVIDIA vGPU Virtual GPU Manager Kernel Out‑of‑Bounds Write Enabling Code Execution
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
nvidia
Published
Updated
Oct 1, 2026, 3:55 AM
Reserved
May 19, 2026, 7:55 PM

View source JSON

Updated
Sep 30, 2026, 5:24 PM

JSON

Status
Awaiting Analysis
Published
Sep 30, 2026, 4:17 PM
Modified
Oct 1, 2026, 4:18 AM

View source JSON

No data.

Updated
Sep 30, 2026, 6:45 PM

JSON