NVIDIA’s Linux display driver contains an access‑control flaw in a kernel mode layer handler, where improper permission checks can be abused. A successful exploitation may allow an attacker to cause a denial of service, elevate privileges, disclose sensitive information, tamper with data, and execute arbitrary code. The flaw is classified as CWE‑281 (Access Control Errors).

All NVIDIA Linux GPU products listed as affected—GeForce, RTX, Quadro, NVS, Tesla, and the Guest driver—are vulnerable. The current information does not specify affected driver versions, so any installation of these drivers on Linux should be considered at risk.

The CVSS score of 7.8 indicates high severity. The EPSS score is not available and the vulnerability is not yet catalogued in CISA’s KEV list, yet the potential for privilege escalation and code execution remains serious. The attack vector is inferred to be local, as the flaw resides in kernel‑mode code, but an attacker with kernel or privileged user access could leverage it to compromise the entire system.