CVE-2026-41156

The GPU DDK is vulnerable to a write use-after-free (UAF) scenario due to improper resource management during GPU system calls. The vulnerability occurs because a shared memory page , managed by a CPU driver thread but accessed by GPU firmware, can be freed by the CPU thread while the firmware is...

CVE-2026-41156 GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding reference

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scenario. A shared resource memory page managed by a CPU thread of control driver and accessed by a GPU thread of control Firmware can caus...