This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-47503 →
DEBIAN-CVE-2026-47503
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bound...
Original description
The description as published by the source.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
nvidia-graphics-drivers
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
nvidia-graphics-drivers
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
nvidia-graphics-drivers
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:12
nvidia-graphics-drivers-tesla
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"525.147.05-6"}]}]
Debian:12
nvidia-graphics-drivers-tesla-470
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:12
nvidia-graphics-drivers-tesla-535
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
nvidia-graphics-drivers-tesla-535
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:12
nvidia-open-gpu-kernel-modules
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
nvidia-open-gpu-kernel-modules
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
References
- advisory security-tracker.debian.org