This vulnerability (CWE-787) exists in the NVIDIA GeForce GPU Display Driver for Linux where the kernel mode layer fails to validate the size of an ioctl input buffer. This flaw allows an unprivileged caller to trigger an out-of-bounds write in kernel memory. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector requires local access with low complexity and no user interaction. Successful exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.

An attacker with local access and low privileges could exploit this vulnerability to write outside the bounds of a kernel buffer, potentially leading to arbitrary code execution in kernel mode, denial of service, privilege escalation, information disclosure, and data tampering. This poses a significant risk to system security and stability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict local access to trusted users and monitor for suspicious activity related to the NVIDIA GPU driver.