NVIDIA vGPU Manager: guest-triggered out-of-bounds write in the host kernel mode layer
Impact
A user inside a guest VM can cause an out-of-bounds write in the Virtual GPU Manager's kernel mode layer, which runs on the hypervisor host. A kernel write on the host from inside a guest is a VM escape candidate, and on a vGPU host the blast radius is every other tenant VM sharing that physical GPU. This is the class of bug that makes a GPU cloud's isolation story collapse, so treat it ahead of the guest-local driver items in the same bulletin.
Who can reach it
From a guest VM with a vGPU assigned, as an ordinary user of that VM. No host access or credentials required.
What to do
Upgrade the Virtual GPU Manager on all hypervisor hosts per NVIDIA bulletin 2026/5861; no fixed version is stated in this record. Every VM on the host must be migrated or stopped and the host rebooted, so run this as a rolling drain across the vGPU fleet.
References
Related entries
- NVIDIA vGPU Manager: guest-triggered out-of-bounds read in the host kernel mode layerCVE-2026-47499 · NVIDIA vGPU Virtual GPU Manager (kernel mode layer)High
- NVIDIA vGPU Manager: crafted data in the GSP tracing shared buffer causes improper accessCVE-2026-47497 · NVIDIA Virtual GPU Manager (GPU System Processor tracing, guest-host shared buffer)High
- NVIDIA vGPU Manager: crafted guest RPC message causes an out-of-bounds write in the GSP pluginCVE-2026-47498 · NVIDIA vGPU Manager (GPU System Processor plugin, guest RPC handling)High
- NVIDIA GPU driver: use-after-free reachable by an unprivileged user through ordinary driver callsCVE-2026-47500 · NVIDIA GPU Display Driver for Windows and Linux (kernel mode layer, object lifetime and refcounting)High
- NVIDIA Linux GPU driver: mismatched buffers during event buffer setup cause a kernel out-of-bounds writeCVE-2026-47501 · NVIDIA GPU Display Driver for Linux (kernel mode layer, event buffer setup)High
- NVIDIA vGPU Manager: guest-triggered integer overflow leads to memory corruptionCVE-2026-47502 · NVIDIA vGPU Virtual GPU Manager (kernel mode layer, size arithmetic)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.