CVE-2026-47503
Awaiting Analysis Awaiting Analysis - Queue

NVIDIA GPU Display Driver Linux vGPU Out-of-Bounds Write

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: NVIDIA Corporation

Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-47503
EUVD
EUVD-2026-90062

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia gpu_display_driver *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in NVIDIA's GPU Display Driver for Linux, specifically in the Virtual GPU Manager (vGPU plugin). A guest VM user can exploit it by sending a crafted RPC message with invalid performance state list size parameters, causing an out-of-bounds write. This may lead to code execution, privilege escalation, data tampering, denial of service, or information disclosure.

Detection Guidance

Detection of this vulnerability requires checking for vulnerable versions of NVIDIA GPU Display Driver for Linux. Use commands like 'nvidia-smi' or 'dpkg -l | grep nvidia-driver' to identify installed versions. Compare the version against NVIDIA's security advisory for CVE-2026-47503.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code, gain elevated privileges, modify or steal data, disrupt services, or expose sensitive information. It primarily affects systems using NVIDIA GPU Display Driver with vGPU functionality.

Compliance Impact

This vulnerability could lead to data tampering, information disclosure, and denial of service, which may violate GDPR's data integrity and confidentiality requirements and HIPAA's safeguards for protected health information. Unauthorized code execution or privilege escalation could also result in unauthorized access to sensitive data.

Mitigation Strategies

Update NVIDIA GPU Display Driver for Linux to the latest patched version immediately to address the out-of-bounds write vulnerability in the Virtual GPU Manager.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47503. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart