CVE-2026-41158 PUBLISHED

GPU DDK - Backed sparse PMRs are not handled by deferred free mechanism after shrink

Assigner: imaginationtech
Reserved: 17.04.2026 Published: 12.06.2026 Updated: 12.06.2026

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages.

Physical memory allocated and freed, without the deferred free mechanism can lead to those resources being used for read/write by the GPU after the kernel module has freed the resource.

Product Status

Vendor Imagination Technologies
Product Graphics DDK
Versions Default: unknown
  • Version 1.18 RTM is unaffected
  • Version 23.2 RTM is unaffected
  • Version 24.2 RTM is unaffected
  • affected from 25.1 RTM to 25.3 RTM (incl.)
  • Version 26.1 RTM is affected
  • Version 26.2 RTM is unaffected

References

Problem Types

  • CWE-416: Use After Free CWE

Impacts

  • CAPEC-124: Shared Resource Manipulation