NVIDIA GPU Display Driver for Linux includes a flaw in the kernel mode component where improper type handling can lead to type confusion. A successful exploit lets an attacker execute arbitrary code with elevated privileges, disrupt system stability, elevate privileges, leak sensitive data, and corrupt information. The weakness is a classic type‑confusion vulnerability, which can be abused to overwrite internal pointers and bypass normal access checks.

This issue affects a broad range of NVIDIA hardware, including GeForce, RTX, Quadro, NVS, and Tesla model GPUs running the Linux display driver. The vulnerability exists across all GPU families that use this driver branch; no specific firmware or driver versions were enumerated in the advisory, indicating that a wide set of releases may be impacted.

The CVSS score of 7.8 signals a significant threat. EPSS data is unavailable, so the exact likelihood of exploitation is uncertain, but the severity suggests attackers could prioritize this vulnerability. The lack of KEV listing does not reduce the risk, as the flaw permits code execution and privilege escalation. Attackers would need to drive the kernel module or craft a payload that triggers the type‑confusion path; the attack vector is likely local or requires a user with kernel module loading rights. Given the kernel‑level impact, any successful exploitation would compromise the host system integrity and confidentiality.