Impact
The NVIDIA GPU Display Driver for Windows and Linux contains a kernel mode layer flaw that fails to enforce proper access control, which may enable an attacker to cause a denial of service. The weakness, identified as CWE-862, could allow an unauthorized entity to trigger the driver to crash or become unstable, potentially interrupting graphical output and rendering services.
Affected Systems
This vulnerability affects multiple NVIDIA GPU products, including GeForce, RTX, Quadro, NVS, and Tesla models, as well as guest driver and virtual GPU manager components. The flaw is present in both Windows and Linux driver packages; version information was not disclosed in the public advisory.
Risk and Exploitability
With a CVSS score of 5.5, the vulnerability is considered medium severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation. The attack vector is likely local or requires privileged access to the kernel layer; the impact is limited to service disruption rather than data compromise. Users should monitor for driver crashes and apply patch updates as soon as they become available.
OpenCVE Enrichment