Vulnerability in NVIDIA Virtual GPU Manager

[ Description ]Official description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund30 Sep 2026WID-SEC-2026-3680

  Nvidia GPU Display Treiber: Multiple vulnerabilities Translated from German

  CVE-2026-47582CVE-2026-47501CVE-2026-47589+113 more CVEs

[ References ]References

• github.com/NVIDIA/product-security/tree/main/2026/5861
• nvd.nist.gov/vuln/detail/CVE-2026-47503
• www.cve.org/CVERecord