CVE-2026-12285

CVE-2026-12285 is a Use After Free vulnerability in Arm Ltd GPU kernel drivers, specifically affecting the Bifrost , Valhall , and Arm 5th Gen GPU Architecture kernel drivers. A local non-privileged user process can perform valid GPU memory processing operations to access already freed memory. Af...

CVE-2026-9040

CVE-2026-9040 is a race condition vulnerability in the Arm Mali GPU Kernel Drivers , affecting three driver families: Bifrost (r12p0–r49p5, r50p0–r51p0, r54p1–r54p2), Valhall (r19p0–r49p5, r50p0–r54p3, r55p0), and the Arm 5th Gen GPU Architecture (r41p0–r49p5, r50p0–r54p3, r55p0). The flaw allows...

EUVD-2026-72800

A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to cause a denial of service or disclose...

CVE-2026-7477

CVE-2026-7477 is a Use After Free vulnerability in Arm Ltd Mali GPU Kernel Drivers, specifically the Bifrost , Valhall , and 5th Gen GPU Architecture drivers. A local non-privileged user process can perform valid GPU memory processing operations to access already freed memory. Affected version ra...

CVE-2026-0860

CVE-2026-0860 is an exposure of sensitive information vulnerability in Arm Mali GPU Kernel Drivers (Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver). A local non-privileged user process can perform improper GPU memory processing operations to access sensitive kernel infor...

EUVD-2026-72794

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to sensitive kernel...

EntropicaPublic

March updates I need to move some work over from the private repos. The exploration into using massivly multheaded models with mixer and readout functions separated continues. Currently training up a Chinese TinyStories on a 3B-equivalent model that trains, easily, on an 8GB gpu. We're looking at...

CVE-2025-14174-analysis

Análisis de CVE-2025-14174: Escritura fuera de límites en el búfer de staging de ANGLE Metal Análisis técnico y prueba de concepto para CVE-2025-14174...

Linux Distros Unpatched Vulnerability : CVE-2026-78984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read...

EUVD-2026-63810

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

CVE-2026-74380

A flaw was found in the Linux kernel's host1x GPU driver. An incorrect return value check in the iommumapsgtable function, coupled with an improper integer assignment in pinjob, could lead to negative value overflows. This vulnerability may result in data integrity issues or system instability...

CVE-2026-76042

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

UBUNTU-CVE-2026-74447

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...

CVE-2026-68260

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...

CVE-2026-68260

CVE-2026-68260 affects the Linux kernel, specifically the drm/imagination driver. The issue arises because the GPU VM code does not properly synchronize find operations with map/unmap operations, allowing a race that can lead to a NULL pointer dereference in certain memory operations. The resolve...

CVE-2026-68260 drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to ensure a map operation shouldn't happen when a find operation is...

CVE-2026-49744 GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes...

PT-2026-64421

Name of the Vulnerable Software and Affected Versions GPU DDK affected versions not specified Description An integer overflow occurs during the calculation of physical offsets for sparse PMRs Partial Memory Regions within the PMRLogicalOffsetToPhysicalOffset function. For PMRs larger than 4 GB,...

EUVD-2026-40609

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13030

Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...