NVIDIA's Linux GPU Display Driver contains a race condition in its kernel mode layer that allows a local privileged user to trigger an out‑of‑bounds write. If successfully exploited, the attacker could obtain code execution, elevate privileges, cause denial of service, or leak and tamper with data.

The vulnerability affects NVIDIA GPUs running the Linux display driver, including GeForce, RTX, Quadro, NVS, Tesla series, as well as the NVIDIA Guest driver. No specific affected driver versions are listed, so any installation may be at risk until a patch is deployed.

With a CVSS score of 6.4, the scenario is considered moderate severity. The exploit requires a privileged local user and the EPSS score is currently unavailable, suggesting an unknown likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because it is a local race condition, adversaries would need access to an account that can load kernel drivers, reducing the risk of widespread remote exploitation but still presenting a significant danger for privileged users.