The vulnerability exists in NVIDIA's kernel mode driver for Linux. A local user can craft an ioctl request that triggers a null pointer dereference, causing the driver to crash, which results in a denial of service.

Affected systems include various NVIDIA GPU devices such as GeForce, RTX, Quadro, NVS, Tesla series, Guest driver, and the Virtual GPU Manager. No specific version ranges are reported in the data, so all current releases based on the described driver may be impacted until an update is provided by NVIDIA.

The CVSS score of 5.5 reflects a medium severity, and because the exploit can only be performed locally, the risk is limited compared to remote vulnerabilities. The EPSS is not available, and the issue is not listed in the CISA KEV catalog, indicating that no publicly known exploits have been reported yet. An attacker would need local access or the ability to execute privileged code to send the malicious ioctl, but the primary consequence is a driver crash leading to service disruption rather than privilege escalation or data leakage.