A flaw in the Linux kernel DRM Imagination driver causes overlapping GPU memory mappings to be split unnecessarily. Each split takes a GEM reference that is never released, leaking up to 32 MB of shared memory per mapping operation, and it incorrectly links the split parts to a mismatched buffer object. This double issue can exhaust system memory and potentially corrupt GPU data, leading to denial‑of‑service and data‑integrity problems.

All Linux kernel builds that include the legacy DRM Imagination driver. The vulnerability resides entirely in the kernel’s GPU virtual‑memory mapping code and does not affect user‑space applications directly.

The CVSS score of 3.3 categorizes the flaw as low severity, and the EPSS score of < 1% indicates a very low likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Exploitation would require a local, privileged kernel context and repeated triggering of the overlapping mapping logic, which is beyond ordinary user‑level capabilities. Therefore the overall risk remains low but could increase if an attacker gains kernel or driver‑level control on the system.