Improper GPU System Calls in Imagination Technologies Software

CVE-2026-41156

What is CVE-2026-41156?

A vulnerability exists in the Imagination Technologies GPU driver where software running with non-privileged user access can execute incorrect GPU system calls. This improper handling leads to resource mismanagement, specifically causing a write use after free scenario. The issue arises when a shared memory page, managed by a CPU thread, is freed before a GPU thread (firmware) has completed its access, potentially exposing the system to stability issues and unauthorized access.

References