CVE-2026-45202 — GPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`

CVE-2026-45202

GPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast` PUBLISHED

Description (CNA)

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free event.

Affected (CNA)

Vendor / product	Versions
Imagination Technologies / Graphics DDK	affected 1.18 RTM2; affected 23.2 RTM2; affected 24.2 RTM2; affected 25.1 RTM2 through 25.3 RTM; affected 26.1 RTM1; unaffected 26.1 RTM2

CWE

CWE-415

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.