Description
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2026-09-30
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation
Action: Patch Now
AI Analysis

Impact

NVIDIA's Virtual GPU Manager for Linux contains a kernel‑mode out‑of‑bounds write bug. A correctly crafted request can overwrite arbitrary kernel memory, possibly allowing an attacker to execute arbitrary code, crash the system, or modify data integrity.

Affected Systems

The vulnerability affects NVIDIA's Virtual GPU Manager for Linux. No specific version numbers are listed in the advisory, so all versions installed prior to a vendor patch are potentially vulnerable.

Risk and Exploitability

The CVSS score of 7.8 marks this as a High severity flaw, and although an EPSS score is not available, the KEV status indicates it is not listed in the CISA KEV catalog. The exploit could enable privilege escalation or code execution. The likely attack vector inferred from the description is a local or privileged user executing a specially crafted operation against the kernel mode layer of the vGPU manager. Security teams should treat this as a high‑risk vulnerability pending a vendor update.

Generated by OpenCVE AI on September 30, 2026 at 18:19 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Contact NVIDIA for the latest vulnerability patch or release.
  • Upgrade the Virtual GPU Manager to a version that contains the fix.
  • Apply system hardening such as disabling unnecessary virtual‑GPU features and enforcing least privilege for processes that interact with the vGPU manager.

Generated by OpenCVE AI on September 30, 2026 at 18:19 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia virtual Gpu Manager

Wed, 30 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
Title NVIDIA vGPU Virtual GPU Manager Kernel Out‑of‑Bounds Write Enabling Code Execution

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Virtual Gpu Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-01T03:55:50.197Z

Reserved: 2026-05-19T19:55:44.854Z

Link: CVE-2026-47541

cve-icon Vulnrichment

Updated: 2026-09-30T17:24:09.079Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:21.470

Modified: 2026-10-01T04:18:13.790

Link: CVE-2026-47541

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T18:45:05Z

Weaknesses