HomeDefault status
unknown
1.18 RTM (custom)
affected
23.2 RTM (custom)
affected
24.2 RTM (custom)
affected
25.1 RTM (custom)
affected
26.1 RTM (custom)
affected
26.2 RTM (custom)
unaffected
Description
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware for more privileged memory accesses than are permitted by the system.
Problem types
CWE-280: Improper Handling of Insufficient Permissions or Privileges (4.15)
Product status
1.18 RTM (custom)
23.2 RTM (custom)
24.2 RTM (custom)
25.1 RTM (custom)
26.1 RTM (custom)
26.2 RTM (custom)
References
www.imaginationtech.com/gpu-driver-vulnerabilities/