Description
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | NVIDIA vGPU Software | All | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux | 5.4.0-39.43 | USN-4404-2 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1017.17 | USN-4404-2 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1019.19 | USN-4404-2 |
| Ubuntu 20.04 LTS | linux-gcp +1 | 5.4.0-1018.18 | USN-4404-2 |
| Ubuntu 20.04 LTS | nvidia-graphics-drivers-390 | 390.138-0ubuntu0.20.04.1 | USN-4404-1 |
| Ubuntu 20.04 LTS | nvidia-graphics-drivers-440 | 440.100-0ubuntu0.20.04.1 | USN-4404-1 |
| Ubuntu 18.04 LTS | linux | 4.15.0-108.109 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1076.80 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-aws-5.3 | 5.3.0-1028.30~18.04.1 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-azure-5.3 | 5.3.0-1031.32~18.04.1 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | 5.3.0-1029.31~18.04.1 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-hwe | 5.3.0-61.55~18.04.1 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1090.100 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-oem-osp1 | 5.0.0-1062.67 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1047.51 | USN-4404-2 |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | 5.3.0-1027.29~18.04.1 | USN-4404-2 |
| Ubuntu 18.04 LTS | nvidia-graphics-drivers-390 | 390.138-0ubuntu0.18.04.1 | USN-4404-1 |
| Ubuntu 18.04 LTS | nvidia-graphics-drivers-440 | 440.100-0ubuntu0.18.04.1 | USN-4404-1 |
Advisories 3
- USN-4404-1 nvidia-graphics-drivers-390, nvidia-graphics-drivers-440 vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-4404-2 linux kernel vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- WID-SEC-2025-1860 Nvidia Treiber: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 18, 2025
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5031
- USN-4404-2 vendor-advisory
- USN-4404-1 vendor-advisory