Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-58410

GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
imaginationtech

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Imagination Technologies Graphics DDK

Default version status: unknown

  • 1.15 RTMunaffected
  • 1.17 RTMunaffected
  • 1.18 RTMunaffected
  • 23.2 RTMunaffected
  • 23.3 RTM to ≤ 25.1 RTM2affected
  • 25.2 RTMaffected

References