Dell OMSA: local heap overflow lets a low-privileged user escalate on the GPU host

Impact

A user with a local shell on a node running OMSA can overflow a heap buffer in the privileged agent and gain full control of the host. On a GPU node this matters wherever workloads get local host access - bare-metal tenancy, HPC login and compute nodes with interactive shells, or any container escape that lands a shell on the host - because OMSA elevates it straight to node compromise including hardware management. This is the local variant; CVE-2026-81477 is a separate remote heap overflow requiring high privilege.

Who can reach it

Local shell on a managed node with any low-privileged account.

What to do

Upgrade OMSA to 11.1.0.3 or later and restart the OMSA services. Nodes that do not need the OMSA agent locally can have it removed instead.

References

Related entries

• Linux RDMA bnxt_re: destroy callbacks re-run against freed resources after a udata failureCVE-2026-93277 · Linux kernel RDMA/bnxt_re (udata validation in destroy/create paths)High
• Linux RDMA core: integer truncation and overflow when picking a memory-region page sizeCVE-2026-97421 · Linux kernel RDMA/umem (ib_umem_find_best_pgsz boundary handling)High
• AMD erratum #1718: INVLPGB/TLBSYNC may fail to invalidate a TLB entryCVE-2026-99099 · AMD x86 processors (INVLPGB/TLBSYNC broadcast TLB invalidation, erratum #1718)High
• AMI MegaRAC SPx 13 (IPMI handler / host SPI flash path): The multi-tenant bare-metal nightmareCVE-2023-34335 · AMI MegaRAC SPx 13 (IPMI handler / host SPI flash path)High
• Linux kernel occ hwmon: truncated OCC poll response is parsed past the valid dataCVE-2026-68340 · Linux kernel occ hwmon driver (IBM POWER OCC poll response parser)High
• openshift-metal3 fakefish: unquoted shell variables in the Redfish shim allow command injectionCVE-2026-71567 · openshift-metal3 fakefish (Redfish-to-BMC shim scripts)High