The NVIDIA GPU Display Driver for Windows and Linux contains a kernel‑mode use‑after‑free that can be triggered by a local user or process. If exploited, the flaw permits arbitrary code execution, privilege escalation, denial of service, information disclosure, and data tampering.

All NVIDIA GPU drivers that ship in kernel‑mode on Windows and Linux are affected, including GeForce, RTX, Quadro, NVS, Tesla, Guest Driver, and the Virtual GPU Manager. The vulnerability applies to all current releases until an official patch is released, because no specific version ranges are listed by the CNA.

The flaw carries a CVSS score of 7.8, reflecting a high severity impact. EPSS data is not available, so the precise likelihood of exploitation is unknown, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a local kernel exploitation that requires the attacker to run code with sufficient privileges to load the vulnerable driver or exploit a local process that interacts with it.