GPU VulnDB

Database/NVIDIA / GPU stack

NVIDIA BlueField - VIRTIO-Net emulation: A VM user sends a crafted message to the BlueField VIRTIO-Net device and gets

CVSS 9.0CVE-2026-65094NVIDIA / GPU stackcurated

Impact

A VM user sends a crafted message to the BlueField VIRTIO-Net device and gets a write-what-where primitive, reaching code execution in the VIRTIO-Net context on the DPU. The DPU is the component you offloaded tenant network isolation onto - a tenant VM reaching code execution inside it inverts the trust model of the whole design. Scored 9.0 with a changed scope.

Who can reach it

A user inside a tenant VM talking to the emulated virtio-net device its own hypervisor exposed. No host or DPU credentials needed. This is the guest-to-DPU boundary.

What to do

Update the BlueField VIRTIO-Net firmware/software per bulletin 5815 across GA, LTS23, LTS24 and LTS25 branches as applicable. Cost: a DPU firmware update takes the DPU's dataplane down, which means the host loses network - treat it as a full node drain, not a live update. Sequence carefully: a half-updated DPU fleet has inconsistent offload behaviour.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-65094https://github.com/NVIDIA/product-security/tree/main/2026/5815

Related entries

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.