Vulnerability · Published Sep 30, 2026 · Assigned by nvidia
CVE-2026-47496
High 7.3
In plain English
A high-severity out-of-bounds write in Virtual GPU Manager from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and denial of service.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | nvidia-graphics-drivers | no fix listed | DEBIAN-CVE-2026-47496 |
| Debian:13 | nvidia-graphics-drivers | no fix listed | DEBIAN-CVE-2026-47496 |
| Debian:14 | nvidia-graphics-drivers | no fix listed | DEBIAN-CVE-2026-47496 |
| Debian:12 | nvidia-graphics-drivers-tesla | 525.147.05-6 | DEBIAN-CVE-2026-47496 |
| Debian:12 | nvidia-graphics-drivers-tesla-470 | no fix listed | DEBIAN-CVE-2026-47496 |
| Debian:12 | nvidia-graphics-drivers-tesla-535 | no fix listed | DEBIAN-CVE-2026-47496 |
| Debian:13 | nvidia-graphics-drivers-tesla-535 | no fix listed | DEBIAN-CVE-2026-47496 |
| Debian:12 | nvidia-open-gpu-kernel-modules | no fix listed | DEBIAN-CVE-2026-47496 |
| Debian:13 | nvidia-open-gpu-kernel-modules | no fix listed | DEBIAN-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-390 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-418-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-430 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-440 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-450 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-450-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-455 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-460 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-470 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-470 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-470-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-470-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-510 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-515 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-515-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-520 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-530 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-535 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-535 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-535-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-535-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-535-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-545 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-550 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-550 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-550 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-550-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-550-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-550-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-560 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-565-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-565-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-570 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-570 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-570 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.10 | nvidia-graphics-drivers-570 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-570-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-570-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-570-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.10 | nvidia-graphics-drivers-570-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-575 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-575 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-575 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-575-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-575-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-580 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-580 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-580 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.10 | nvidia-graphics-drivers-580 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-580-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-580-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-580-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.10 | nvidia-graphics-drivers-580-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-590 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-590 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-590-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-590-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-595 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-595 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-595 | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:22.04:LTS | nvidia-graphics-drivers-595-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:24.04:LTS | nvidia-graphics-drivers-595-server | no fix listed | UBUNTU-CVE-2026-47496 |
| Ubuntu:26.04:LTS | nvidia-graphics-drivers-595-server | no fix listed | UBUNTU-CVE-2026-47496 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | Virtual GPU Manager | 595.71.03(All versions prior to and including vGPU 20.1) |
| NVIDIA | Virtual GPU Manager | 580.159.01(All versions prior to and including vGPU 19.5) |
| NVIDIA | Virtual GPU Manager | 596.38(All versions prior to and including vGPU 20.1) |
| NVIDIA | Virtual GPU Manager | 582.51(All versions prior to and including vGPU 19.5) |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H