This vulnerability (CWE-787) exists in the NVIDIA GeForce GPU Display Driver for Linux kernel mode layer. A user can cause an out-of-bounds write by providing mismatched memory buffers during event buffer setup. The CVSS 3.1 score is 7.8 (high), with attack vector local, low attack complexity, requiring low privileges and no user interaction. Successful exploitation may result in code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

If exploited, this vulnerability could allow an attacker with local access and low privileges to execute arbitrary code, cause denial of service, escalate privileges, disclose sensitive information, and tamper with data on affected systems running the NVIDIA GeForce GPU Display Driver for Linux.

Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict local access to trusted users and monitor for suspicious activity related to GPU driver usage.