NVIDIA GPU Display Driver for Linux contains an unprivileged local use‑after‑free bug in its kernel mode layer. A successful local exploit can lead to arbitrary code execution, denial of service, privilege escalation, information disclosure, and data tampering. The weakness is classified as CWE‑416 and CWE‑825. The description explicitly states these potential impacts, with no additional surprises.

The vulnerability affects NVIDIA’s Linux GPU Display Drivers used on GeForce, Quadro, RTX, Tesla, NVS, and Guest driver collections. No specific driver versions are listed, so all current driver releases for these products are potentially affected. The attack is local as it requires only an unprivileged user to trigger the use‑after‑free.

The CVSS score of 7.8 indicates a high‑moderate severity. EPSS is not available and the vulnerability is not listed in CISA KEV, suggesting low to moderate exploitation likelihood. The exploit requires local access to the driver and can be achieved by running code that interacts with the GPU device. Once triggered, the attacker can gain elevated privileges or crash the system, consistent with the impacts outlined above.