Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scenario. A shared resource (memory page) managed by a CPU thread of control (driver) and accessed by a GPU thread of control (Firmware) can cause a write UAF when the CPU thread frees the resource before the GPU FW has finished accessing it.
Problem types
CWE-416: Use After Free (4.15)
Product status
1.18 RTM (custom)
23.2 RTM (custom)
24.2 RTM (custom)
25.1 RTM (custom)
26.1 RTM (custom)
26.2 RTM (custom)
References
www.imaginationtech.com/gpu-driver-vulnerabilities/