Integer Overflow Leading to UAF in GPU Driver

Executive Summary

This vulnerability occurs when software running as a non-privileged user makes improper GPU system calls that cause an integer overflow. This overflow leads to two GPU virtual addresses being mapped to the same physical memory address.

One of these virtual mappings can be freed along with the physical memory page, but the second virtual mapping still references the now freed physical address. This situation creates a use-after-free (UAF) condition where the second mapping can be used to read from or write to physical memory that may have been reallocated to another process.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker or malicious software running as a non-privileged user to gain unauthorized read and write access to physical memory that should no longer be accessible.

Because the freed physical memory can be reallocated to other processes, this can lead to data leakage, corruption, or unauthorized modification of data belonging to other processes, potentially compromising system integrity and confidentiality.

Useful 0 Not Useful 0