This vulnerability (CWE-416) exists in the NVIDIA GeForce Linux GPU Display Driver's kernel module event delivery path. An unprivileged local user can cause a use-after-free condition by racing asynchronous event delivery against file close operations. The flaw can be exploited to achieve multiple impacts including arbitrary code execution, escalation of privileges, denial of service, information disclosure, and data tampering. The CVSS 3.1 base score is 7.0, indicating high severity with attack vector local, high attack complexity, low privileges required, no user interaction, and full confidentiality, integrity, and availability impacts.

An attacker with local unprivileged access could exploit this race condition to execute arbitrary code, escalate privileges, cause denial of service, disclose sensitive information, or tamper with data on affected systems running the NVIDIA GeForce Linux GPU Display Driver.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restricting local unprivileged access and monitoring for suspicious activity may reduce risk.