CVE-2026-65584
Received Received - Intake

GPU Stack Overflow in Linux Kernel via Fence Sync

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: imaginationtech

Description
Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Linux/Android fence synchronization checkpoints, while user checkpoints are excluded from the stack array. Successful exploitation can cause kernel memory corruption and typically results in a denial-of-service condition through a kernel crash. The code vulnerability is a buffer write beyond the allocated array on the stack caused by copying excessive data from an internal buffer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-65584
EUVD
EUVD-2026-113477

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper GPU system calls made by software running as a non-privileged user. It causes a stack overflow in the kernel when processing Linux/Android fence synchronization checkpoints. The overflow happens due to copying excessive data from an internal buffer, leading to memory corruption.

Impact Analysis

Successful exploitation can corrupt kernel memory and typically causes a denial-of-service by crashing the kernel. Systems running affected software may become unresponsive or require a reboot.

Compliance Impact

This vulnerability causes kernel memory corruption and denial-of-service through crashes, which could lead to system instability or data loss. Such conditions may violate compliance requirements under GDPR (availability of processing systems) and HIPAA (integrity and availability of protected health information).

Mitigation Strategies

Update the Imagination Technologies Graphics DDK to the latest patched version to address the stack overflow issue in GPU system calls. Monitor kernel logs for crashes or memory corruption errors related to fence synchronization checkpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65584. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart