This vulnerability in NVIDIA Virtual GPU Manager arises from a TOCTOU race condition in the GPU System Processor tracing component. A guest virtual machine user can exploit this by sending specially crafted data through a shared buffer, causing improper access. The flaw could allow attackers to execute arbitrary code, escalate privileges, tamper with data, cause denial of service, or disclose sensitive information. The CVSS 3.1 base score is 7.8, reflecting high impact with local attack vector, low attack complexity, and requiring low privileges without user interaction.

Successful exploitation may lead to code execution within the affected system, escalation of privileges beyond the guest VM user, unauthorized data modification, denial of service conditions, and leakage of sensitive information. These impacts affect confidentiality, integrity, and availability of the system.

No patch or official remediation details are provided in the available data. Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected component and monitor for suspicious activity related to shared buffer usage.