This vulnerability (CWE-476) exists in the NVIDIA GPU Display Driver for Linux kernel mode component. A local user with the ability to submit ioctl calls can cause a null pointer dereference by crafting a specific ioctl request. This leads to a denial of service condition due to the kernel driver crashing or becoming unstable. The CVSS 3.1 base score is 5.5, reflecting local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability.

The impact is denial of service on the affected system due to a null pointer dereference in the kernel mode driver. There is no confidentiality or integrity impact. The attacker must have local access and the ability to submit ioctl calls to the driver.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restricting local user access to the device and limiting ioctl submission privileges may reduce risk.