Vulnerability · Published Sep 30, 2026 · Assigned by nvidia

CVE-2026-47503

High 7.8

In plain English

A high-severity out-of-bounds write in Virtual GPU Manager from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 97.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12nvidia-graphics-driversno fix listedDEBIAN-CVE-2026-47503
Debian:13nvidia-graphics-driversno fix listedDEBIAN-CVE-2026-47503
Debian:14nvidia-graphics-driversno fix listedDEBIAN-CVE-2026-47503
Debian:12nvidia-graphics-drivers-tesla525.147.05-6DEBIAN-CVE-2026-47503
Debian:12nvidia-graphics-drivers-tesla-470no fix listedDEBIAN-CVE-2026-47503
Debian:12nvidia-graphics-drivers-tesla-535no fix listedDEBIAN-CVE-2026-47503
Debian:13nvidia-graphics-drivers-tesla-535no fix listedDEBIAN-CVE-2026-47503
Debian:12nvidia-open-gpu-kernel-modulesno fix listedDEBIAN-CVE-2026-47503
Debian:13nvidia-open-gpu-kernel-modulesno fix listedDEBIAN-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-390no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-418-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-430no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-440no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-450no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-450-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-455no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-460no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-470no fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-470no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-470-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-470-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-510no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-515no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-515-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-520no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-530no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-535no fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-535no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-535-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-535-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-535-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-545no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-550no fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-550no fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-550no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-550-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-550-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-550-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-560no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-565-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-565-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-570no fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-570no fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-570no fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.10nvidia-graphics-drivers-570no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-570-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-570-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-570-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.10nvidia-graphics-drivers-570-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-575no fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-575no fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-575no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-575-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-575-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-580no fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-580no fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-580no fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.10nvidia-graphics-drivers-580no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-580-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-580-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-580-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.10nvidia-graphics-drivers-580-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-590no fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-590no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-590-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-590-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-595no fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-595no fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-595no fix listedUBUNTU-CVE-2026-47503
Ubuntu:22.04:LTSnvidia-graphics-drivers-595-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:24.04:LTSnvidia-graphics-drivers-595-serverno fix listedUBUNTU-CVE-2026-47503
Ubuntu:26.04:LTSnvidia-graphics-drivers-595-serverno fix listedUBUNTU-CVE-2026-47503

Affected products (as reported)

VendorProductVersions
NVIDIA Virtual GPU Manager 595.71.03(All versions prior to and including vGPU 20.1)
NVIDIA Virtual GPU Manager 580.159.01(All versions prior to and including vGPU 19.5)
NVIDIA Virtual GPU Manager 596.38(All versions prior to and including vGPU 20.1)
NVIDIA Virtual GPU Manager 582.51(All versions prior to and including vGPU 19.5)

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References