The vulnerability resides in NVIDIA GPU Display Driver for Linux’s kernel mode layer. A user can repeatedly call a specific interface that emits unrate‑limited error messages, causing the kernel log buffer to grow uncontrollably. This uncontrolled log generation can exhaust kernel resources and crash the driver, leading to a denial of service. The weakness is categorized as CWE‑400 and CWE‑770, indicating a lack of resource exhaustion controls and improper memory allocation handling.

Affected products include NVIDIA GeForce, NVIDIA Guest driver, NVIDIA RTX, NVIDIA Quadro, NVIDIA NVS, NVIDIA Tesla, and NVIDIA Virtual GPU Manager running on Linux systems. Versions are unspecified in the advisory, so all releases are potentially vulnerable.

The CVSS score of 5.5 indicates moderate severity. EPSS data is currently unavailable, and the flaw is not listed in the CISA Known Exploited Vulnerabilities catalog. Based on the description, the likely attack vector is local or potentially privileged, as it requires a user to invoke the vulnerable interface that writes to the kernel log. A successful exploit would result in service disruption through kernel log flooding, but no evidence of remote code execution or data breach is provided.