NVIDIA’s GPU Display Driver for Linux contains a flaw in the kernel-mode component that lets an unprivileged user override read‑only memory protection through an authorization check that wrongly allows write access to protected kernel memory. Writing to this memory can lead to arbitrary code execution, denial of service, credential elevation, information disclosure, or data tampering, consistent with the CWE‑266 classification.

The vulnerability applies to NVIDIA GPU drivers on Linux for the GeForce, RTX, Quadro, NVS, Tesla families and the NVIDIA Virtual GPU Manager. All in‑stock driver versions shipped with these GPUs that include the kernel‑mode layer are potentially affected; no specific version ranges are published.

The CVSS score of 7.8 indicates a high‑severity condition. With the EPSS score unavailable, current exploitation likelihood is unknown, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local; an attacker must be able to run code on a Linux system using the vulnerable NVIDIA driver to exploit the memory‑corruption bypass.