← CVE Intelligence

CVE-2025-58410

GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR PUBLISHED

Description (CNA)

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.

Affected (CNA)

Vendor / productVersions
Imagination Technologies / Graphics DDKunaffected 1.15 RTM; unaffected 1.17 RTM; unaffected 1.18 RTM; unaffected 23.2 RTM; affected 23.3 RTM through 25.1 RTM2; affected 25.2 RTM

CWE

CWE-280

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.