ECHO-a712-437e-7f66

See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-a712-437e-7f66.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-a712-437e-7f66
Upstream
  • CVE-2026-47518
Withdrawn
2026-10-06T11:16:15Z
Published
2026-10-02T02:56:59Z
Modified
2026-10-06T11:45:05Z
Summary
Vulnerability is in GPU firmware (GSP / secure microcontroller), loaded by the host kernel driver. Echo ships only the userspace cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that component is provided by the host, not the image. https://github.com/NVIDIA/product-security/tree/main/2026/5861
Details
References

Affected packages

Echo / nvidia-graphics-drivers

Package

Name
nvidia-graphics-drivers
Purl
pkg:deb/echo/nvidia-graphics-drivers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
590.48.01-0ubuntu1+e1

Database specific

source
"https://advisory.echohq.com/osv/ECHO-a712-437e-7f66.json"