NVIDIA’s GPU Display Driver for Linux includes a flaw in its kernel mode layer that can allow a user to exhaust the DRM VMA offset address space, leading to uncontrolled resource consumption. A successful exploit can trigger a denial of service by causing the driver to run out of address space needed for GPU memory mapping. This represents a resource depletion weakness, classified as CWE‑400 and CWE‑770, and carries a CVSS score of 5.5, indicating moderate severity.

All NVIDIA GPU product lines that use the Linux display driver are affected, including GeForce, RTX, Quadro, NVS, Tesla, as well as the NVIDIA Guest Drivers and the Virtual GPU Manager. Version details are not specified in the report, so any current or older releases that incorporate this driver layer are potentially vulnerable.

The CVSS score of 5.5 places this issue in the moderate range; however, the lack of an EPSS score and the absence of a KEV listing suggest the likelihood of exploitation is currently low. Based on the description, it is inferred that an attacker would need local access with the ability to invoke the driver, implying that privileged or compromised local users could exhaust GPU address space. If not mitigated, a single successful trigger could render the GPU and any dependent applications inoperable until the system is rebooted or the driver is reloaded.