CVE-2026-47502

Summary

The flaw is an integer overflow in the NVIDIA vGPU kernel mode layer, which could allow a guest user to cause memory corruption, potentially leading to code execution, data tampering, and privilege escalation. This vulnerability is significant because it can be exploited by attackers with guest user privileges, posing a serious risk to system security.

Exploitability

Exploitation requires guest user privileges and the ability to trigger the integer overflow, making it moderately difficult. Precondition is the presence of the affected NVIDIA vGPU software on the system.

Blast radius

If exploited, this vulnerability could lead to code execution, denial of service, and data tampering, impacting the security and integrity of the system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 21.20.2002 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.