Use-After-Free Vulnerability in Imagination Technologies GPU Driver

CVE-2025-58408

What is CVE-2025-58408?

The vulnerability arises from software running as a non-privileged user, allowing improper GPU system calls that may lead to reads of stale data. This scenario poses serious risks, including triggering kernel exceptions and potential write use-after-free errors. Since the stale data may contain references to resources whose counts can become imbalanced, it can result in premature destruction of those resources while they are still in use, leading to unstable system behavior and further security implications.

References