Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-41158

GPU DDK - Backed sparse PMRs are not handled by deferred free mechanism after shrink

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
imaginationtech

Description

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the deferred free mechanism can lead to those resources being used for read/write by the GPU after the kernel module has freed the resource.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Imagination Technologies Graphics DDK

Default version status: unknown

  • 1.18 RTMunaffected
  • 23.2 RTMunaffected
  • 24.2 RTMunaffected
  • 25.1 RTM to ≤ 25.3 RTMaffected
  • 26.1 RTMaffected
  • 26.2 RTMunaffected

References