CVE-2026-47503

Summary

The vulnerability in NVIDIA GPU Display Driver for Linux allows a guest VM user to cause an out-of-bounds write via a crafted RPC message, potentially leading to code execution and data tampering.

Exploitability

Exploitation requires a guest VM with access to the vGPU plugin and the ability to send a crafted RPC message, making it moderately difficult to exploit.

Blast radius

If exploited, this vulnerability could lead to code execution, privilege escalation, and data tampering within the affected system, with potential impact on the host and other VMs.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the specific version 530.40.03 or later as published by NVIDIA.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.