CVE-2026-47496

A flaw was found in the NVIDIA Virtual GPU (vGPU) Manager within the NVIDIA GPU Display Driver. A user within a guest virtual machine (VM) can exploit this vulnerability by sending a specially crafted Remote Procedure Call (RPC) request to the host system, causing an out-of-bounds memory write. A successful exploit may allow the guest user to achieve privilege escalation, tamper with host data, or trigger a Denial of Service (DoS) condition on the host.

This vulnerability is rated as an Important severity flaw because an authenticated user inside a guest virtual machine can compromise the integrity and availability of the underlying virtualization host. Although exploitation is restricted to environments utilizing NVIDIA Virtual GPU (vGPU) virtualization and requires local access within a provisioned guest, the potential for host-level memory corruption and denial of service warrants the elevated severity rating. Standard host installations that do not configure or expose NVIDIA vGPU services to guest domains remain unaffected by this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.