In the Linux kernel Tegra DRM driver, the host1x_client_register() function is called before the address register map for the gr2d and gr3d GPUs is initialized. As a result, the device becomes visible to userspace while its register map is still uninitialized, meaning a userspace application may submit a rendering job that references invalid or uninitialized memory. This improper initialization can cause the driver to crash or behave unpredictably, leading to service interruption for applications that rely on GPU acceleration.

Any Linux kernel that includes the unpatched Tegra DRM driver for the gr2d or gr3d GPUs is potentially affected, irrespective of the kernel version, because the code path is part of the standard driver tree. Devices that use Tegra GPU acceleration—such as NVIDIA Jetson boards or other ARM-based platforms with Tegra GPUs—are the most directly impacted.

The CVSS score is not disclosed and EPSS data is unavailable. The flaw is not listed in the CISA KEV catalog, indicating no publicly known exploitation. The vulnerability requires local or privileged access that allows an attacker to submit a GPU job during the initialization window; without such access the risk is confined to local denial of service when the driver is loaded and jobs are processed.