CVE-2025-46708
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-06-27
Last updated on: 2025-10-21
Assigner: imaginationtech
Description
Description
Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| imaginationtech | ddk | From 23.2 (inc) to 24.2 (exc) |
| imaginationtech | ddk | 1.15 |
| imaginationtech | ddk | 1.17 |
| imaginationtech | ddk | 1.18 |
| android | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-280 | The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves software running inside a Guest Virtual Machine (VM) making improper GPU system calls that can prevent other Guest VMs from using the GPU for their work.
How can this vulnerability impact me? :
The vulnerability can impact you by causing denial of GPU resources to other Guest VMs, potentially leading to degraded performance or denial of service for those VMs relying on GPU processing.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70