This vulnerability exists in the kernel‑mode portion of NVIDIA GPU display drivers for both Windows and Linux. When an exploited fault occurs, kernel stack contents—including return addresses and pointer values—are exposed. The disclosure can be leveraged by an attacker with local privileges to reverse engineer the execution path and inject malicious code, which in turn can lead to denial of service, privilege escalation, information disclosure, or data tampering. The risk is enabled through a local attack vector and requires the attacker to be able to trigger a fault or load malicious code into the driver framework.

All NVIDIA GPU drivers listed by the CNA—including GeForce, RTX, Quadro, NVS, Tesla, and the Guest driver—for both Windows and Linux platforms are affected. Version information is not specified, so any driver installed at the time of the advisory could be vulnerable.

The CVSS base score of 7.8 signals a high‑severity flaw, while the EPSS score is not available and the vulnerability is not yet catalogued in CISA’s KEV register. These data points suggest that, although no widespread exploitation is currently known, the potential for an attacker to exploit a local kernel‑mode stack disclosure remains significant. Accordingly, the risk stays elevated, especially for systems where local users have elevated privileges or the ability to load kernel modules.