Description
Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.
The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.
The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.
Published:
2026-11-13
Score:
n/a
EPSS:
< 1% Very Low
KEV:
No
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://www.imaginationtech.com/gpu-driver-vulnerabilities/ |
|
History
Fri, 13 Nov 2026 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot. The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations. | |
| Title | GPU DDK - Write UAF in OSDebugSignalPID due to incorrect management of PID resources | |
| Weaknesses | CWE-416 | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: imaginationtech
Published:
Updated: 2026-11-13T02:10:11.401Z
Reserved: 2026-07-10T21:04:02.026Z
Link: CVE-2026-15465
No data.
Status : Received
Published: 2026-11-13T02:18:56.620
Modified: 2026-11-13T02:18:56.620
Link: CVE-2026-15465
No data.
OpenCVE Enrichment
No data.
Weaknesses