Impact
NVIDIA Display Driver for Linux includes a kernel module that contains a race condition flaw. If an attacker can artificially reorder compiler or processor memory instructions, the module may become corrupted or enter an unstable state, which can cause the system to crash or become unresponsive. The impact is a denial of service to users of the affected NVIDIA hardware.
Affected Systems
The vulnerability affects NVIDIA GeForce, RTX, Quadro, NVS, Tesla, Guest driver, Virtual GPU Manager, and other NVIDIA guest driver components on Linux platforms. Exact version numbers are not specified in the available data, so any instance of the driver that contains the unpatched kernel module is potentially vulnerable.
Risk and Exploitability
The CVSS score is 4.7, indicating a moderate severity. No EPSS score is available, so the current likelihood of exploitation is unknown. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the attack vector is likely local or user‑initiated, as it requires a user to provoke a race condition by manipulating memory instruction ordering. No public exploit code has been reported, but the race condition could be leveraged by a privileged user or through a malicious application designed to trigger the condition. The risk remains medium to high if the driver is used in a security‑sensitive context, as it could lead to service interruption.
OpenCVE Enrichment