The NVIDIA Virtual GPU Manager for Linux contains a flaw that allows an attacker to cause incorrect resource transfer between GPU spheres. This mis‑management can lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering, as reflected by the included CWE-664 and CWE-669 weaknesses.

All installations of NVIDIA's Virtual GPU Manager on Linux are potentially impacted. No specific version ranges are provided in the public advisory, so any current version should be regarded as vulnerable until a vendor patch is released.

The CVSS score of 7.8 places this vulnerability in the high‑severity range, while the EPSS score of <1% indicates a very low probability of exploitation at the time of analysis. The vulnerability is not listed in the CISA KEV catalog. A detailed attack vector is not explicitly described in the available data; the likely attack vector is inferred to be either local or remote exploitation via interaction with the vGPU Manager service or GPU namespace resources, depending on the attacker’s access level. Given the potential for critical impact, timely remediation is warranted.