CVE-2026-45195 — GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted

CVE-2026-45195

GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted PUBLISHED

Description (CNA)

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware for more privileged memory accesses than are permitted by the system.

Affected (CNA)

Vendor / product	Versions
Imagination Technologies / Graphics DDK	affected 1.18 RTM; affected 23.2 RTM; affected 24.2 RTM; affected 25.1 RTM through 25.3 RTM; affected 26.1 RTM; unaffected 26.2 RTM

CWE

CWE-280

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.