CVE-2026-49747 · Infrastructure
NO FIX YET
A non-privileged program can issue GPU system calls that map a GPU buffer larger than 4GB, which overflows an integer and corrupts an array length. The result is out-of-bounds writes to GPU buffers, which can crash the kernel or read and write memory the program should not reach.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
The sources do not name the affected driver versions or products beyond the NVIDIA GPU system call path. Systems with NVIDIA GPUs where untrusted local users or software run unprivileged workloads are the ones to look at. unknown
Not affected if no-nvidia-gpu, no-untrusted-local-users
Who cares gpu, kernel, linux, nvidia
Unknown from the sources.
No fix yet, per the sources.
Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers.
The integer overflow caused when mapping a GPU buffer >4GB causes corruption of array length, and can lead to kernel panics or out of bounds access.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.