NVIDIA GPU Display Driver for Linux contains a flaw in the kernel mode layer where cryptographic signatures are not properly verified. This weakness allows the signature verification process to be bypassed when the system experiences high memory pressure, permitting malicious data to be accepted by the driver. The effect of a successful exploitation can be downtime due to a crash or corruption of data processed by the GPU. The flaw represents a lack of signature verification (CWE-347) and would require the attacker to cause or already possess memory‑pressure conditions to trigger it.

The vulnerability affects NVIDIA GPU Display Driver for Linux used across the GeForce, RTX, Quadro, NVS, and Tesla product families. No specific driver version numbers are listed, so all releases of the driver for these product lines should be considered potentially vulnerable until an updated package is released.

The flaw resides within a kernel mode driver; an attacker who can induce memory pressure or already has local or elevated kernel privileges could trigger the signature bypass. The CVSS score of 7.1 signals a high severity, and the lack of a publicly known exploit and absence from the CISA KEV catalog suggest that widespread exploitation is not currently expected, but the vulnerability could compromise system performance or integrity if exploited. Monitoring for driver crashes or data corruption and applying remediation promptly remain important.