CVE-2026-34192

GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries

CVSS 7.7 HIGHEPSS 0.1%CWE-416

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.7EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 jun 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables. The vulnerability allows physical memory allocated for MMU page tables to be used after being freed. This was caused by an error path that would not cleanup properly before freeing the physical allocation.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Produtos afetados

Imagination Technologies · Graphics DDK

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.imaginationtech.com/gpu-driver-vulnerabilities/