CVE-2026-47519

A flaw was found in nvidia-vgpu-software's Virtual GPU (vGPU) Manager for Linux. A local user with basic privileges can trigger an out-of-bounds read in the kernel-mode driver, accessing memory outside designated boundaries. A successful exploit could allow the attacker to execute arbitrary code, escalate privileges, tamper with data, or cause a denial of service (DoS).

Red Hat has evaluated this vulnerability as having an Important impact because an authenticated local attacker with standard privileges can compromise kernel integrity, potentially achieving privilege escalation or causing a host denial of service without requiring user interaction. The vulnerability resides specifically within the proprietary NVIDIA Virtual GPU Manager for Linux, which is not packaged or distributed as part of standard Red Hat Enterprise Linux installations. Typical Red Hat environments are unaffected unless third-party NVIDIA virtualization components have been explicitly installed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.