← Back to search

CVE-2026-47536

7.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary
This vulnerability allows an attacker to perform an out-of-bounds read in the kernel mode layer of NVIDIA vGPU Virtual GPU Manager for Linux, potentially leading to code execution, denial of service, and data manipulation.
Exploitability
Exploitation requires local access and specific conditions, making it moderately difficult. The attacker must have the ability to interact with the vGPU system.
Blast radius
If exploited, the impact could be severe, affecting the system's stability, security, and data integrity, potentially leading to a complete system compromise.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the latest version of NVIDIA vGPU Virtual GPU Manager for Linux, specifically version 2.590 or later.
rcekernellocal-privilege-escalationdata-tamperingvulnerabilitygpu

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-125

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.