This vulnerability (CWE-416) exists in the NVIDIA GeForce GPU Display Driver's open-source kernel module Resource Server on Windows and Linux platforms. An unprivileged local user can cause a use-after-free condition through a missing self-reference guard in the map cleanup path. This memory corruption flaw could be exploited to achieve code execution, escalate privileges, cause denial of service, disclose sensitive information, or tamper with data. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch details are currently available.

Successful exploitation may allow an unprivileged local attacker to execute arbitrary code with elevated privileges, disrupt system availability, disclose sensitive information, or modify data. The flaw affects confidentiality, integrity, and availability of the affected system components.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local user access to trusted individuals only and monitor for suspicious activity related to the NVIDIA GPU Display Driver. Do not assume the vulnerability is mitigated without official confirmation.