Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-15466

GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
imaginationtech

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF. The race condition in the destruction path could lead to reference counter being decremented in non-atomical way allowing other code paths using a freed object to read and/or write kernel heap memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Imagination Technologies Graphics DDK

Default version status: unknown

  • 1.18 RTM2unaffected
  • 23.2 RTM2unaffected
  • 24.2 RTM2affected
  • 25.1 RTM2 to ≤ 25.3 RTMaffected
  • 26.1 RTM2affected
  • 26.2 RTMunaffected

References