CVE-2026-41155

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-06-12

Last updated on: 2026-06-17

Assigner: imaginationtech

Description

An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an attacker could disrupt the operation of another secure GPU process leading to image corruption / GPU hardware recovery. Sharing secure memory allocations among various GPU secure processes allows an attacker to corrupt shared resource affecting other users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-12

Last Modified

2026-06-17

Generated

2026-10-12

AI Q&A

2026-06-13

EPSS Evaluated

2026-10-10

NVD

CVE-2026-41155

EUVD

EUVD-2026-36606

Affected Vendors & Products

Vendor	Product	Version / Range
Imagination	Technologies	Graphics DDK 1.18 RTM
Imagination	Technologies	Graphics DDK 23.2 RTM
Imagination	Technologies	Graphics DDK 24.2 RTM
Imagination	Technologies	Graphics DDK 25.1 RTM
Imagination	Technologies	Graphics DDK 26.1 RTM

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-653	The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

Attack-Flow Graph

Executive Summary

This vulnerability involves the ability of an attacker to pass data between secure GPU processes by exploiting shared secure memory allocations in the kernel module.

Additionally, the attacker can disrupt the operation of another secure GPU process, which may lead to image corruption or trigger GPU hardware recovery.

The root cause is the sharing of secure memory allocations among various GPU secure processes, which allows an attacker to corrupt shared resources and affect other users.

Impact Analysis

This vulnerability can impact you by allowing an attacker to interfere with secure GPU processes, potentially leading to unauthorized data sharing between secure processes.

It can also cause disruption in GPU operations, resulting in image corruption or forcing the GPU hardware to recover, which may degrade system stability and performance.

Overall, it compromises the integrity and isolation of secure GPU processes, which could affect the confidentiality and reliability of GPU-accelerated applications.

Hi! I’m here to help you understand CVE-2026-41155. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70