Out-of-Bounds Memory Access in Linux Kernel GPU API

Publication date: 2026-07-10

Last updated on: 2026-07-10

Assigner: imaginationtech

Description

Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in the page freeing logic of the sparse memory implementation, incorrect buffer indexing leads to OOB access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-10

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-11

EPSS Evaluated

N/A

NVD

CVE-2026-41154

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability occurs when software running as a non-privileged user makes GPU API calls that cause out-of-bounds (OOB) kernel memory reads or writes.

Specifically, the issue arises during the indexing of pages larger than 4kB in the page freeing logic of the sparse memory implementation, where incorrect buffer indexing leads to out-of-bounds memory access.

Impact Analysis

The vulnerability can lead to unauthorized reading or writing of kernel memory through GPU API calls made by non-privileged software.

This could potentially allow attackers to access sensitive information or corrupt kernel memory, which may result in system instability, crashes, or privilege escalation.

Hi! I’m here to help you understand CVE-2026-41154. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70