This vulnerability (CVE-2026-24200) involves a use-after-free condition in the NVIDIA Virtual GPU Manager component of the vGPU software. An attacker with local access and low privileges could trigger this flaw to manipulate stack memory after it has been freed. Successful exploitation could result in multiple impacts including denial of service, escalation of privileges, disclosure of sensitive information, tampering with data, and arbitrary code execution. The vulnerability affects all versions up to and including the March 2026 release. The CVSS v3.1 base score is 7.0, reflecting high severity with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability.

If exploited, this vulnerability could allow an attacker to cause denial of service, escalate privileges, disclose sensitive information, tamper with data, or execute arbitrary code on affected systems running vulnerable versions of NVIDIA Virtual GPU Manager. This could compromise system integrity and confidentiality. However, there are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published by NVIDIA as of the information available. Users should monitor NVIDIA's security advisories for updates and apply patches promptly once available. Until then, restricting local access to trusted users and minimizing exposure of affected systems may reduce risk.