Exploitation Risk in NVIDIA Virtual GPU Manager Due to Tracing Component Flaw
CVE-2026-47497
What is CVE-2026-47497?
The NVIDIA Virtual GPU Manager has identified a vulnerability within its GPU System Processor (GSP) tracing component. This issue allows a user from a guest VM to execute crafted data through a shared buffer, potentially leading to unauthorized access. The consequences of exploiting this flaw include privilege escalation, code execution, denial of service, and information disclosure. It is crucial for users to update their systems and mitigate these risks by applying the latest security patches.
Affected Version(s)
Virtual GPU Manager Azure Local, Windows Server(vGPU 19) 582.51(All versions prior to and including vGPU 19.5)
Virtual GPU Manager Azure Local, Windows Server(vGPU 20) 596.38(All versions prior to and including vGPU 20.1)
Virtual GPU Manager XenServer, VMware vSphere, Red Hat Enterprise Linux KVM, Ubuntu(vGPU 19) 580.159.01(All versions prior to and including vGPU 19.5)