The NVIDIA vGPU Virtual GPU Manager for Linux contains a flaw in its kernel‑mode layer that allows an attacker to perform an out‑of‑bounds read. This vulnerability can lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

Affected systems are NVIDIA Guest drivers and NVIDIA Virtual GPU Manager on Linux platforms. The flaw exists in the kernel‑mode component of the vGPU stack; current Linux releases of these components are vulnerable. Users of these kernel modules are at risk.

The CVSS score of 7.8 indicates high severity. The lack of an available EPSS score and no listing in KEV suggest limited publicly known exploitation at present, but the potential for privilege escalation and data disclosure makes the vulnerability critical. Based on the description, the attack vector is likely local or requires interaction with the kernel module, which is feasible for a privileged user or a user with local access in a virtualized environment.