CVE-2026-15466

Full vulnerability record from the local CVENow database.

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF. The race condition in the destruction path could lead to reference counter being decremented in non-atomical way allowing other code paths using a freed object to read and/or write kernel heap memory.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

367425dc-4d06-4041-9650-c2dc6aaa27ce

Published

2026-10-30 02:17:08.980000

Last modified

2026-10-30 02:17:08.980000

View original CVE JSON

{
  "id": "CVE-2026-15466",
  "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
  "published": "2026-10-30T02:17:08.980",
  "lastModified": "2026-10-30T02:17:08.980",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF.\n\n\n\nThe race condition in the destruction path could lead to reference counter being decremented in non-atomical way allowing other code paths using a freed object to read and/or write kernel heap memory."
    }
  ],
  "affected": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "affectedData": [
        {
          "vendor": "Imagination Technologies",
          "product": "Graphics DDK",
          "defaultStatus": "unknown",
          "platforms": [
            "Linux",
            "Android"
          ],
          "versions": [
            {
              "version": "1.18 RTM2",
              "versionType": "custom",
              "status": "unaffected"
            },
            {
              "version": "23.2 RTM2",
              "versionType": "custom",
              "status": "unaffected"
            },
            {
              "version": "24.2 RTM2",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "25.1 RTM2",
              "lessThanOrEqual": "25.3 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "26.1 RTM2",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "26.2 RTM",
              "versionType": "custom",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/",
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"
    }
  ]
}