The vulnerability is a race condition in NVIDIA’s Linux GPU display driver. When triggered by an advanced attacker, it can cause the driver to expose bits of sensitive memory. The leakage is limited in scope but could allow an unauthorized actor to gather confidential data. An attacker who successfully exploits the race condition may also induce denial of service or attempt data tampering, as the driver may become unstable or behave unpredictably.

The issue applies to NVIDIA GPU drivers for Linux across several product lines, including GeForce, RTX, Quadro, NVS and Tesla. Specific version information was not disclosed, so all drivers that match these vendor/product categories should be evaluated for the presence of the race condition.

The CVSS score of 5.6 indicates a moderate severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that widespread exploitation is not yet documented. The attack vector is inferred to be local or advanced, relying on an attacker’s ability to manipulate race timing within the driver. Because the weakness is CVE‑200 (Information Exposure through Private Data), the attack is primarily aimed at leaking private data rather than executing arbitrary code.