← Back

CVE-2023-31026

nvd nist
Published: Nov 2, 2023Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.

Affected (3)

Products: Nvidia: Virtual Gpu
Nvidia
1 product
Virtual Gpu
Configuration A
3 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Nvidia
Virtual Gpu
Before 13.9
Virtual Gpu
From 14.0 to 15.4
Virtual Gpu
From 16.0 to 16.2
Running on/withPlatform Versions
Canonical
Ubuntu Linux
All versions
Citrix
Hypervisor
All versions
Linux Kvm
Kernel Virtual Machine
All versions
Redhat
Enterprise Linux
All versions
Vmware
Vsphere
All versions

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

Source: psirt@nvidia.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.