Description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).
References (1)
Core 1
Core References
Patch, Third Party Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/5211
Scores
CVSS v3
5.5
EPSS
0.0004
EPSS Percentile
13.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (1)
nvidia/virtual_gpu
8.0 - 8.8
Published
Jul 21, 2021
Tracked Since
Feb 18, 2026