Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
1228 vulnerabilities
CVE-2026-65142 (GCVE-0-2026-65142)
Vulnerability from cvelistv5 – Published: 2026-10-06 21:03 – Updated: 2026-10-07 15:41
VLAI
EPSS
VEX
Summary
NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 15:40 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Model-Optimizer |
Affected:
0-0.43.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-65142",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T15:40:25.300722Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T15:41:14.055Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"All"
],
"product": "Model-Optimizer",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "0-0.43.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure."
}
],
"value": "NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, data tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T21:03:15.565Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65142"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65142"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5903"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-65142",
"datePublished": "2026-10-06T21:03:15.565Z",
"dateReserved": "2026-07-21T17:28:38.791Z",
"dateUpdated": "2026-10-07T15:41:14.055Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65122 (GCVE-0-2026-65122)
Vulnerability from cvelistv5 – Published: 2026-10-06 21:01 – Updated: 2026-10-07 15:39
VLAI
EPSS
VEX
Summary
NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 15:39 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-65122",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T15:39:00.561001Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T15:39:23.089Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"All platforms"
],
"product": "TensorRT",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "0 to 11.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service."
}
],
"value": "NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T21:01:42.877Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65122"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65122"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5891"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-65122",
"datePublished": "2026-10-06T21:01:42.877Z",
"dateReserved": "2026-07-21T17:12:33.431Z",
"dateUpdated": "2026-10-07T15:39:23.089Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47539 (GCVE-0-2026-47539)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
6.7 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-681 - Incorrect Conversion between Numeric Types
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47539",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:47.277Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-681",
"description": "CWE-681 Incorrect Conversion between Numeric Types",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:59.603Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47539"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47539"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47539",
"datePublished": "2026-09-30T15:54:59.603Z",
"dateReserved": "2026-05-19T19:55:43.813Z",
"dateUpdated": "2026-10-01T03:55:47.277Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47496 (GCVE-0-2026-47496)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and denial of service.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47496",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:47.978Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "escalation of privileges,\ndata tampering, denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:58.452Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47496"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47496"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47496",
"datePublished": "2026-09-30T15:54:58.452Z",
"dateReserved": "2026-05-19T19:55:40.488Z",
"dateUpdated": "2026-10-01T03:55:47.978Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47574 (GCVE-0-2026-47574)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-669 - Incorrect Resource Transfer Between Spheres
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47574",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:48.736Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-669",
"description": "CWE-669 Incorrect Resource Transfer Between Spheres",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:57.287Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47574"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47574"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47574",
"datePublished": "2026-09-30T15:54:57.287Z",
"dateReserved": "2026-05-19T19:55:47.437Z",
"dateUpdated": "2026-10-01T03:55:48.736Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47544 (GCVE-0-2026-47544)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47544",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:49.475Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:55.848Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47544"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47544"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47544",
"datePublished": "2026-09-30T15:54:55.848Z",
"dateReserved": "2026-05-19T19:55:44.855Z",
"dateUpdated": "2026-10-01T03:55:49.475Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47541 (GCVE-0-2026-47541)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47541",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:50.197Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:54.696Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47541"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47541"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47541",
"datePublished": "2026-09-30T15:54:54.696Z",
"dateReserved": "2026-05-19T19:55:44.854Z",
"dateUpdated": "2026-10-01T03:55:50.197Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47536 (GCVE-0-2026-47536)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47536",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:50.893Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:53.437Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47536"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47536"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47536",
"datePublished": "2026-09-30T15:54:53.437Z",
"dateReserved": "2026-05-19T19:55:43.812Z",
"dateUpdated": "2026-10-01T03:55:50.893Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47535 (GCVE-0-2026-47535)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47535",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:51.755Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:51.967Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47535"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47535"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47535",
"datePublished": "2026-09-30T15:54:51.967Z",
"dateReserved": "2026-05-19T19:55:43.812Z",
"dateUpdated": "2026-10-01T03:55:51.755Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47521 (GCVE-0-2026-47521)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47521",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:52.454Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:42.363Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47521"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47521"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47521",
"datePublished": "2026-09-30T15:54:42.363Z",
"dateReserved": "2026-05-19T19:55:42.911Z",
"dateUpdated": "2026-10-01T03:55:52.454Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47520 (GCVE-0-2026-47520)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Guest driver |
Affected:
596.36(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
582.53(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47520",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:53.177Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:40.980Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47520"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47520"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47520",
"datePublished": "2026-09-30T15:54:40.980Z",
"dateReserved": "2026-05-19T19:55:42.109Z",
"dateUpdated": "2026-10-01T03:55:53.177Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47519 (GCVE-0-2026-47519)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Guest driver |
Affected:
596.36(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
582.53(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47519",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:53.873Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:39.728Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47519"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47519"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47519",
"datePublished": "2026-09-30T15:54:39.728Z",
"dateReserved": "2026-05-19T19:55:42.109Z",
"dateUpdated": "2026-10-01T03:55:53.873Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47503 (GCVE-0-2026-47503)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47503",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:54.616Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
}
],
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:38.530Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47503"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47503"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47503",
"datePublished": "2026-09-30T15:54:38.530Z",
"dateReserved": "2026-05-19T19:55:41.286Z",
"dateUpdated": "2026-10-01T03:55:54.616Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47499 (GCVE-0-2026-47499)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47499",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:55.469Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:37.373Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47499"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47499"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47499",
"datePublished": "2026-09-30T15:54:37.373Z",
"dateReserved": "2026-05-19T19:55:40.489Z",
"dateUpdated": "2026-10-01T03:55:55.469Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47498 (GCVE-0-2026-47498)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC message. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47498",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:56.179Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC message. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
}
],
"value": "NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC message. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:36.010Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47498"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47498"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47498",
"datePublished": "2026-09-30T15:54:36.010Z",
"dateReserved": "2026-05-19T19:55:40.489Z",
"dateUpdated": "2026-10-01T03:55:56.179Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47497 (GCVE-0-2026-47497)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47497",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:56.927Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
}
],
"value": "NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-367",
"description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:34.858Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47497"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47497"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47497",
"datePublished": "2026-09-30T15:54:34.858Z",
"dateReserved": "2026-05-19T19:55:40.488Z",
"dateUpdated": "2026-10-01T03:55:56.927Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47495 (GCVE-0-2026-47495)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47495",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:57.618Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"value": "NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:33.636Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47495"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47495"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47495",
"datePublished": "2026-09-30T15:54:33.636Z",
"dateReserved": "2026-05-19T19:55:40.488Z",
"dateUpdated": "2026-10-01T03:55:57.618Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47493 (GCVE-0-2026-47493)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-10-01 03:55
VLAI
EPSS
VEX
Summary
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 00:00 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47493",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T03:55:58.397Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
}
],
"value": "NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "code execution, escalation of privileges,\ndata tampering, denial of service, information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:23.981Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47493"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47493"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47493",
"datePublished": "2026-09-30T15:54:23.981Z",
"dateReserved": "2026-05-19T19:55:40.488Z",
"dateUpdated": "2026-10-01T03:55:58.397Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47562 (GCVE-0-2026-47562)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:29
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string is not properly sanitized. A successful exploit of this vulnerability might lead to denial of service and data tampering.
Severity
4.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 16:45 UTC
CWE
- CWE-116 - Improper Encoding or Escaping of Output
Assigner
References
Impacted products
16 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47562",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T16:45:35.625550Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:29:27.944Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string is not properly sanitized. A successful exploit of this vulnerability might lead to denial of service and data tampering."
}
],
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string is not properly sanitized. A successful exploit of this vulnerability might lead to denial of service and data tampering."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "data tampering, denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-116",
"description": "CWE-116 Improper Encoding or Escaping of Output",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:21.858Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47562"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47562"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47562",
"datePublished": "2026-09-30T15:54:21.858Z",
"dateReserved": "2026-05-19T19:55:46.481Z",
"dateUpdated": "2026-09-30T17:29:27.944Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47531 (GCVE-0-2026-47531)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:29
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
Severity
4.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 16:45 UTC
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
Impacted products
22 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.60
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 616.56
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 582.78
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47531",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T16:45:44.005661Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:29:28.116Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.60"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:20.645Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47531"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47531"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47531",
"datePublished": "2026-09-30T15:54:20.645Z",
"dateReserved": "2026-05-19T19:55:43.812Z",
"dateUpdated": "2026-09-30T17:29:28.116Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47526 (GCVE-0-2026-47526)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:29
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
Severity
4.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 16:45 UTC
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
Impacted products
22 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 616.56
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 582.78
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47526",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T16:45:52.487968Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:29:28.249Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:19.357Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47526"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47526"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47526",
"datePublished": "2026-09-30T15:54:19.357Z",
"dateReserved": "2026-05-19T19:55:42.911Z",
"dateUpdated": "2026-09-30T17:29:28.249Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47604 (GCVE-0-2026-47604)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:29
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 16:45 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
Impacted products
30 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 616.56
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 582.78
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Guest driver |
Affected:
596.36(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
582.53(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47604",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T16:45:58.913327Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:29:28.388Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process\u0027s GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure."
}
],
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process\u0027s GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:18.109Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47604"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47604"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47604",
"datePublished": "2026-09-30T15:54:18.109Z",
"dateReserved": "2026-05-19T19:55:50.277Z",
"dateUpdated": "2026-09-30T17:29:28.388Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47603 (GCVE-0-2026-47603)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:59
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 17:41 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
Impacted products
30 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 616.56
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 582.78
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Guest driver |
Affected:
596.36(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
582.53(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47603",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T17:41:47.656066Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:59:45.231Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process\u0027s GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure."
}
],
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process\u0027s GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:16.928Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47603"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47603"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47603",
"datePublished": "2026-09-30T15:54:16.928Z",
"dateReserved": "2026-05-19T19:55:50.277Z",
"dateUpdated": "2026-09-30T17:59:45.231Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47584 (GCVE-0-2026-47584)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:59
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 17:41 UTC
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.60
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 616.56
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 582.78
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.88
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47584",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T17:41:53.842578Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:59:45.416Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.60"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:15.481Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47584"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47584"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47584",
"datePublished": "2026-09-30T15:54:15.481Z",
"dateReserved": "2026-05-19T19:55:48.350Z",
"dateUpdated": "2026-09-30T17:59:45.416Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47581 (GCVE-0-2026-47581)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:59
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. A successful exploit of this vulnerability might lead to denial of service.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 17:42 UTC
CWE
- CWE-667 - Improper Locking
Assigner
References
Impacted products
12 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.60
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 616.56
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 582.78
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47581",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T17:42:00.441858Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:59:45.556Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.60"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. A successful exploit of this vulnerability might lead to denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. A successful exploit of this vulnerability might lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-667",
"description": "CWE-667 Improper Locking",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:14.241Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47581"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47581"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47581",
"datePublished": "2026-09-30T15:54:14.241Z",
"dateReserved": "2026-05-19T19:55:48.350Z",
"dateUpdated": "2026-09-30T17:59:45.556Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47568 (GCVE-0-2026-47568)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:59
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled kernel log generation by repeatedly invoking an interface that emits unrate-limited error messages. A successful exploit of this vulnerability might lead to denial of service.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 17:42 UTC
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
Impacted products
16 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47568",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T17:42:09.152077Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:59:45.689Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled kernel log generation by repeatedly invoking an interface that emits unrate-limited error messages. A successful exploit of this vulnerability might lead to denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled kernel log generation by repeatedly invoking an interface that emits unrate-limited error messages. A successful exploit of this vulnerability might lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400 Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:04.746Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47568"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47568"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47568",
"datePublished": "2026-09-30T15:54:04.746Z",
"dateReserved": "2026-05-19T19:55:46.482Z",
"dateUpdated": "2026-09-30T17:59:45.689Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47567 (GCVE-0-2026-47567)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:59
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 17:42 UTC
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
Impacted products
16 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47567",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T17:42:19.003143Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:59:45.850Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400 Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:03.281Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47567"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47567"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47567",
"datePublished": "2026-09-30T15:54:03.281Z",
"dateReserved": "2026-05-19T19:55:46.482Z",
"dateUpdated": "2026-09-30T17:59:45.850Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47566 (GCVE-0-2026-47566)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:59
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak in error paths leading to kernel memory exhaustion. A successful exploit of this vulnerability might lead to denial of service.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 17:42 UTC
CWE
- CWE-401 - Missing Release of Memory after Effective Lifetime
Assigner
References
Impacted products
16 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47566",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T17:42:26.518892Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:59:46.000Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak in error paths leading to kernel memory exhaustion. A successful exploit of this vulnerability might lead to denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak in error paths leading to kernel memory exhaustion. A successful exploit of this vulnerability might lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-401",
"description": "CWE-401 Missing Release of Memory after Effective Lifetime",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:02.071Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47566"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47566"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47566",
"datePublished": "2026-09-30T15:54:02.071Z",
"dateReserved": "2026-05-19T19:55:46.482Z",
"dateUpdated": "2026-09-30T17:59:46.000Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47557 (GCVE-0-2026-47557)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:54 – Updated: 2026-09-30 17:59
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 17:42 UTC
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
Impacted products
16 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47557",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T17:42:32.882065Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:59:46.159Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service."
}
],
"value": "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "denial of service"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:54:00.866Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47557"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47557"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47557",
"datePublished": "2026-09-30T15:54:00.866Z",
"dateReserved": "2026-05-19T19:55:45.574Z",
"dateUpdated": "2026-09-30T17:59:46.159Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-47555 (GCVE-0-2026-47555)
Vulnerability from cvelistv5 – Published: 2026-09-30 15:53 – Updated: 2026-09-30 17:59
VLAI
EPSS
VEX
Summary
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized kernel memory to be copied back to userspace. A successful exploit of this vulnerability might lead to information disclosure.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-30 17:42 UTC
CWE
- CWE-908 - Use of Uninitialized Resource
Assigner
References
Impacted products
30 products
| Vendor | Product | Version | |
|---|---|---|---|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.60
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 616.56
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 582.78
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 596.86
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 616.92
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.88
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | RTX, Quadro, NVS |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 615.71.09
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 610.57.04
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | Tesla |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 595.91.07
|
|
| NVIDIA | GeForce |
Affected:
All driver versions prior to 580.178.04
|
|
| NVIDIA | Guest driver |
Affected:
596.36(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
582.53(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Guest driver |
Affected:
595.71.05(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Guest driver |
Affected:
580.159.03(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
595.71.03(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
580.159.01(All versions prior to and including vGPU 19.5)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
596.38(All versions prior to and including vGPU 20.1)
|
|
| NVIDIA | Virtual GPU Manager |
Affected:
582.51(All versions prior to and including vGPU 19.5)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47555",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T17:42:41.128885Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T17:59:46.290Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.60"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.56"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected."
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 582.78"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 596.86"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 616.92"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.88"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "RTX, Quadro, NVS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R615)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 615.71.09"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R610)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 610.57.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "Tesla",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R595)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 595.91.07"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(R580)"
],
"product": "GeForce",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All driver versions prior to 580.178.04"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.36(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.53(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 20)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.05(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Linux(vGPU 19)"
],
"product": "Guest driver",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.03(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "595.71.03(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "580.159.01(All versions prior to and including vGPU 19.5)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 20)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "596.38(All versions prior to and including vGPU 20.1)"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Azure Local, Windows Server(vGPU 19)"
],
"product": "Virtual GPU Manager",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "582.51(All versions prior to and including vGPU 19.5)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized kernel memory to be copied back to userspace. A successful exploit of this vulnerability might lead to information disclosure."
}
],
"value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized kernel memory to be copied back to userspace. A successful exploit of this vulnerability might lead to information disclosure."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "information disclosure"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-908",
"description": "CWE-908 Use of Uninitialized Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T15:53:59.344Z",
"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"shortName": "nvidia"
},
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47555"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47555"
},
{
"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5861"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "NVIDIA PSIRT"
}
}
},
"cveMetadata": {
"assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6",
"assignerShortName": "nvidia",
"cveId": "CVE-2026-47555",
"datePublished": "2026-09-30T15:53:59.344Z",
"dateReserved": "2026-05-19T19:55:45.573Z",
"dateUpdated": "2026-09-30T17:59:46.290Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}