CVE-2026-47496
Description
A flaw was found in the NVIDIA Virtual GPU (vGPU) Manager within the NVIDIA GPU Display Driver. A user within a guest virtual machine (VM) can exploit this vulnerability by sending a specially crafted Remote Procedure Call (RPC) request to the host system, causing an out-of-bounds memory write. A successful exploit may allow the guest user to achieve privilege escalation, tamper with host data, or trigger a Denial of Service (DoS) condition on the host.
Statement
This vulnerability is rated as an Important severity flaw because an authenticated user inside a guest virtual machine can compromise the integrity and availability of the underlying virtualization host. Although exploitation is restricted to environments utilizing NVIDIA Virtual GPU (vGPU) virtualization and requires local access within a provisioned guest, the potential for host-level memory corruption and denial of service warrants the elevated severity rating. Standard host installations that do not configure or expose NVIDIA vGPU services to guest domains remain unaffected by this issue.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.3 | N/A | 7.3 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | Low | N/A | Low |
| Integrity Impact | High | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
