Technical impact
The flaw occurs when the driver holds a control structure that includes a firmware address for a SYNC_PRIMITIVE_BLOCK but fails to keep a reference to that address. When the CPU thread frees the shared memory page before the GPU firmware has finished accessing it, the memory is reused. This write use‑after‑free situation can corrupt GPU state, potentially causing a crash or, if an attacker can influence the freed data, arbitrary code execution on the system. The vulnerability is classified as Use After Free (CWE‑416).
Affected Systems
Imagination Technologies Graphics DDK – no specific versions are listed in the CNA data.
Risk and Exploitability
The CVSS score is 7.7. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting that explosive exploitation activity has not been observed yet. Nevertheless, the local attack vector is plausible: any non‑privileged user able to execute improper GPU system calls can trigger the condition. Because the flaw directly involves kernel‑space memory management for a GPU driver, the potential impact is high; service disruption or memory corruption could occur without additional privileges.
