A flaw was found in the NVIDIA GPU Display Driver for Linux. A race condition between asynchronous event delivery and file close operations in the open-source kernel module can lead to a use-after-free condition, where memory is accessed after it has already been released. A local unprivileged attacker could exploit this vulnerability to achieve arbitrary code execution, escalate privileges, or cause a denial of service (DoS).
Last checked: 2026-10-01 04:41 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 00:00 UTC)
Fix evidence last checked: 2026-10-01 15:31 UTC
Debian 12 (Bookworm)
Debian Security Tracker · Observed 2026-10-01