In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
[
{
"cpes": [
"cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*"
],
"vendor": "imaginationtech",
"product": "ddk",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "23.3"
}
],
"defaultStatus": "unaffected"
}
]