Improper GPU System Calls Affecting Imagination Technologies Driver Products

CVE-2026-49743

What is CVE-2026-49743?

A vulnerability in Imagination Technologies' GPU driver allows improper GPU system calls to manipulate the lifetimes of synchronization objects within the kernel. This occurs during workload submissions involving an exported fence, where the reference count of the relevant synchronization primitive is not incremented appropriately. An attacker can exploit this flaw by destroying the exported fence, which can lead to a premature release of the underlying primitive, resulting in a use-after-free (UAF) condition. Such a scenario can be exploited to potentially execute unauthorized actions in the system.

References