The vulnerability is a null pointer dereference in the kernel‑mode layer of the NVIDIA GPU driver for Windows and Linux. An attacker could trigger this flaw, causing the driver to crash and leading to an availability loss. Because the driver operates in kernel space, the crash would halt all GPU‑related operations and could result in a system reboot. CWE‑476 indicates that a defensive null check was omitted before the pointer was used, a common programming error. The primary impact is a denial of service; no confidentiality or integrity compromise is described.

Affected vendors and products include NVIDIA GeForce, RTX, Quadro, NVS, and Tesla series GPU drivers on both Windows and Linux operating systems. Specific affected version information is not provided in the CVE data.

The CVSS score of 4.4 places the vulnerability in the low‑medium range. EPSS is not available, and the exploit is not listed in the CISA KEV catalog. The description indicates a kernel‑mode denial of service that would require an attacker to have local access to the system or the ability to interact with the GPU driver. Therefore, the risk is moderate for environments where privileged local users can manipulate the driver, but unlikely to be exploited remotely.