CVE-2024-47893 GPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or write data outside the Guest's virtualised GPU memory...

CVE-2024-47893

CVE-2024-47893 is a vulnerability in kernel software in a guest VM that can read/write data outside the VM’s virtualised GPU memory by exploiting shared memory with the GPU firmware. Multiple connected sources (NVD, Red Hat, CVE listing, CNNVD) confirm the issue affects Imagination Technologies’ ...