CVE-2025-46708

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU...

CVE-2025-46707

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU...

CVE-2025-46707

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU...

CVE-2025-46708

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU...

CVE-2025-46708

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU...

CVE-2025-46708 GPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU...

CVE-2025-46708 GPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU...

CVE-2025-46708

A security vulnerability exists in the Imagination GPU Driver where software running inside a Guest VM can perform improper GPU system calls. This allows a malicious guest to prevent other guests from processing work on the GPU, potentially causing a Denial of Service for other virtualized worklo...

CVE-2025-46707

Software running within a Guest VM can override the Firmware's state to gain unauthorized access to the GPU . The root cause involves a GPU DDK issue where a Guest VM can override its own FW VZ connection state even after the Firmware has closed it. While the specific affected product and version...

CVE-2025-46707 GPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU...

CVE-2025-46707 GPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU...

CVE-2025-46707: Exposure of Resource to Wrong Sphere

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU...

PT-2025-27244

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-27245

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU. Recommendations: At the moment, there is no...

Imagination GPU Driver security vulnerabilities

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that stems from the possibility that Guest VMs may make improper GPU system calls, which could result in the GPU being unavailable to other Guests...

CVE-2025-46708: Improper Handling of Insufficient Permissions or Privileges

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU...

USN-7595-4 linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7598-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7598-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

USN-7596-2 linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPIO subsystem; - GPU drivers; - InfiniBand drivers; - IRQ chip drivers; - Network drivers; - Mellanox network...

USN-7596-2: Linux kernel (Azure, N-Series) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPIO subsystem; - GPU drivers; - InfiniBand drivers; - IRQ chip drivers; - Network drivers; - Mellanox network...