NVIDIA Virtual GPU Manager contains a missing authorization vulnerability (CWE-862) in its GPU kernel driver. This flaw permits a guest virtual machine to access host GPU resources for which it lacks authorization. The vulnerability affects both Windows and Linux versions of the vGPU software. A successful exploit could lead to multiple impacts including code execution, escalation of privileges, tampering with data, denial of service, and disclosure of sensitive information. The CVSS v3.1 base score is 7.8, indicating high severity. There is no information about affected versions or available patches in the provided data.

The vulnerability allows unauthorized access to privileged GPU resources from a guest environment, potentially enabling attackers to execute arbitrary code, escalate privileges, tamper with data, cause denial of service, and disclose sensitive information. This could compromise the confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict access to the affected NVIDIA Virtual GPU Manager installations and monitor for unusual activity related to GPU resource access.