A vulnerability in the kernel mode layer of NVIDIA GPU Display Driver for Linux allows a user to trigger a NULL pointer dereference. This flaw can enable code execution, denial of service, privilege escalation, information disclosure, or data tampering if successfully exploited. The impact of the vulnerability is serious because it gives an attacker a path into kernel memory, allowing escalation of privileges and complete compromise of the affected system.

Affected products include NVIDIA GeForce, Guest Driver, RTX, Quadro, NVS, Tesla and the Virtual GPU Manager suite. Explicit version or release information is not provided, which means any installation of those driver families is potentially vulnerable until a patch is applied.

The CVSS score of 7.8 categorizes this flaw as high severity. EPSS is not available, so the current exploitable probability is unknown. It is not listed in CISA’s KEV catalog. Because the failure occurs in the kernel mode layer, the most likely attack vector is a local user or a user with elevated privileges who can load kernel modules. A successful exploit would provide privileged code execution and could lead to full system compromise.