NVIDIA (Megatron LM) Products March 2026 Security Update Advisory
overview
NVIDIA(https://www.nvidia.com) has released a security update that addresses a vulnerability in its supplied products. users of affected products are advised to update to the latest version.
affected Products
Apex All versions that do not include commit db8e053
B300 MCU, and earlier versions
Megatron LM versions prior to 0.15.3
Model Optimizer 0.41.0 and earlier versions
NeMo Framework 2.6.2 and earlier versions
Triton Inference Server 26.01 or earlier
VIRTIO-Net SNAP4 SNAP-4.9.0 and earlier versions
VIRTIO-Net SNAP4 SNAP-4.9.1 and earlier versions
resolved Vulnerabilities
Pointer Offset Error in Virtualized Storage Path (VIRTIO-BLK) Handling in NVIDIA SNAP-4 Container (CVE-2025-33215, CVSS 6.8) [1]
Buffer size miscalculation error in the configuration interface in NVIDIA SNAP-4 Container (CVE-2025-33216, CVSS 6.8) [1
vulnerability patches
The following product-specific vulnerability patches were made available in the 03/24/2026 update. for more information on vulnerability patches, please refer to the “Security Updates” section of the product-specific reference site documentation.
VIRTIO-Net SNAP4 SNAP-4.9.0 SNAP-4.9.1 SNAP-4.5.5 Versions
VIRTIO-Net SNAP4 SNAP-4.9.1 SNAP4 4.5.5
Apex Any code branch that includes commit db8e053 version
B300 MCU B300 1.4 version
Triton Inference Server 26.01 version
Model Optimizer 0.41.0 version
NeMo Framework 2.6.2 version
Megatron LM version 0.15.3
reference Sites
[1] NVIDIA VIRTIO-Net SNAP4 – March 2026
https://nvidia.custhelp.com/app/answers/detail/a_id/5744
[2] NVIDIA Apex – March 2026
https://nvidia.custhelp.com/app/answers/detail/a_id/5782
[3] NVIDIA B300 MCU – March 2026
https://nvidia.custhelp.com/app/answers/detail/a_id/5768
[4] NVIDIA Triton Inference Server – March 2026
https://nvidia.custhelp.com/app/answers/detail/a_id/5790
[5] NVIDIA Model Optimizer – March 2026
https://nvidia.custhelp.com/app/answers/detail/a_id/5798
[6] NVIDIA NeMo Framework – March 2026
https://nvidia.custhelp.com/app/answers/detail/a_id/5800
[7] NVIDIA Megatron LM – March 2026