7.8Hoch

CVE-2026-47503

NVIDIA Virtual GPU Manager Veröffentlicht: (vor 1 Monat)

Beschreibung

NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Schwachstellentyp (CWE): CWE-787

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
NVIDIA Virtual GPU Manager 595.71.03(All versions prior to and including vGPU 20.1)

Referenzen und Patches