Improper GPU System Call Vulnerability in Imagination Technologies Driver

CVE-2026-45201

What is CVE-2026-45201?

A vulnerability exists in the GPU driver provided by Imagination Technologies, where software executing under non-privileged user contexts can perform improper GPU system calls. This may result in the system treating invalid log2 page sizes as valid, specifically when allocating physical pages. As a result, 4K pages might be misclassified as higher order pages, which can facilitate out-of-bounds (OOB) read and/or write operations. Such vulnerabilities arise due to insufficient validation of provided values, potentially compromising the system's memory integrity.

References