CVE-2026-41156 PUBLISHED

GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding reference

Assigner: imaginationtech
Reserved: 17.04.2026 Published: 19.06.2026 Updated: 19.06.2026

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scenario.

A shared resource (memory page) managed by a CPU thread of control (driver) and accessed by a GPU thread of control (Firmware) can cause a write UAF when the CPU thread frees the resource before the GPU FW has finished accessing it.

Product Status

Vendor Imagination Technologies
Product Graphics DDK
Versions Default: unknown
  • Version 1.18 RTM is affected
  • Version 23.2 RTM is affected
  • Version 24.2 RTM is affected
  • affected from 25.1 RTM to 25.3 RTM (incl.)
  • Version 26.1 RTM is affected
  • Version 26.2 RTM is unaffected

References

Problem Types

  • CWE-416: Use After Free (4.15) CWE

Impacts

  • CAPEC-124: Shared Resource Manipulation (Version 3.9)