The vulnerability resides in the GPU kernel driver of NVIDIA Virtual GPU Manager for Windows and Linux, allowing a guest virtual machine to read or write privileged GPU resources on the host that it is not authorized to access. This flaw can lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure. The weakness is a privilege escalation flaw (CWE-862).

The affected products are NVIDIA Virtual GPU Manager on both Windows and Linux operating systems. The vendor entry lists NVIDIA:Virtual GPU Manager. Specific affected versions are not listed in the CVE, so the scope of the flaw across releases is uncertain.

The CVSS score of 7.8 signals high severity, although a specific EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a guest VM with vGPU access, so it is limited to environments that deploy NVIDIA vGPU. No public exploit information is disclosed in the CVE, so continued monitoring for anomalous GPU activity is recommended.