CVE-2025-58410 GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource...

CVE-2025-58410

CVE-2025-58410 concerns Imagination Technologies PowerVR-GPU drivers. The root cause is improper handling of memory protections for a buffer resource, enabling a non-privileged process to perform improper GPU system calls that could grant write access to buffers exported as read-only via dma_buf ...