CVE-2026-34192 — GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries

CVE-2026-34192

GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries PUBLISHED

Description (CNA)

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables. The vulnerability allows physical memory allocated for MMU page tables to be used after being freed. This was caused by an error path that would not cleanup properly before freeing the physical allocation.

Affected (CNA)

Vendor / product	Versions
Imagination Technologies / Graphics DDK	affected 1.18 RTM; affected 23.2 RTM; affected 24.2 RTM; affected 25.1 RTM through 25.3 RTM; unaffected 26.1 RTM

CWE

CWE-416

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.