CVE-2026-41155

GPU DDK - SharedSecMem mapped into all GPU virtual address spaces

State
Published
Severity
5.5 Medium
Published
Jun 12, 2026
Updated
Jun 15, 2026
Reserved
Apr 17, 2026

Read the record on cve.org

Description

An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an attacker could disrupt the operation of another secure GPU process leading to image corruption / GPU hardware recovery.

Sharing secure memory allocations among various GPU secure processes allows an attacker to corrupt shared resource affecting other users.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-653 Improper Isolation or Compartmentalization

Affected Products

ProductVersions
Graphics DDKImagination Technologies
  • 1.18 RTMAffected
  • 23.2 RTMAffected
  • 24.2 RTMAffected
  • 25.1 RTM through 25.3 RTMAffected
  • 26.1 RTMAffected
  • 26.2 RTMNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.