The vulnerability is a kernel mode type confusion in NVIDIA GPU Display Driver for Linux that can be triggered by a handle recycle race. It can lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. It is a local kernel‑level flaw that could allow a privileged local user to gain full system control through arbitrary code execution in the kernel. The weakness is classified as CWE‑843, Incorrect Type Conversion or Cast.

Affected NVIDIA driver families include GeForce, Guest driver, RTX, Quadro, NVS, Tesla, and Virtual GPU Manager on Linux platforms. Version details are not provided in the advisory; users should verify against the latest driver releases from NVIDIA for the fix. No specific version numbers are listed, so any installation of the driver from before the patch may be vulnerable.

The CVSS score is 7.8, indicating high severity. The EPSS score is not available, so exploitation probability is unknown, but the lack of a known exploit in KEV suggests it may not yet be widely abused. The likely attack vector is local, requiring the adversary to have access to the affected system to trigger the kernel race. Successful exploitation can lead to arbitrary kernel code execution, which is effectively a full privilege escalation to root. Since no official workaround is documented, the only mitigation is to obtain the patched driver.