NVIDIA Megatron Bridge for Linux contains a flaw that allows an attacker to disrupt the management of dynamically loaded code resources, potentially enabling arbitrary code execution, privilege escalation, data tampering, and information disclosure. The vulnerability arises from improper control over code resources, a classic instance of insecure deserialization or dynamic code injection as categorized by CWE-502.

The affected product is NVIDIA Megatron Bridge for Linux. Specific version numbers are not provided in the available advisories, so all installations of this component should be reviewed for updates.

The CVSS score of 7.8 classifies this issue as high severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly defined in the description; it is inferred that an attacker would need local access or exploit an exposed interface to trigger the flaw. Given the high impact and the lack of an easily verified exploitation probability, organizations should treat this as a critical exposure where vulnerable systems could be compromised if the flaw is successfully leveraged.