The vulnerability exists in the kernel mode layer of NVIDIA's vGPU Virtual GPU Manager for Windows and Linux. It involves an integer overflow or wraparound condition that a guest user can trigger, resulting in memory corruption. Exploitation of this vulnerability could allow an attacker to execute arbitrary code, cause denial of service, escalate privileges, disclose sensitive information, or tamper with data. The CVSS v3.1 base score is 7.8, indicating a high severity with attack vector local, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to critical impacts including arbitrary code execution, denial of service, privilege escalation, information disclosure, and data tampering within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently provided. Until a patch is available, restrict access to the affected components and monitor for suspicious activity related to the vGPU Virtual GPU Manager.