GPU Register Access Privilege Escalation in Kernel Software

Publication date: 2026-07-10

Last updated on: 2026-07-10

Assigner: imaginationtech

Description

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privilege escalation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-10

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-11

EPSS Evaluated

N/A

NVD

CVE-2026-45196

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-280	The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.

Attack-Flow Graph

Executive Summary

This vulnerability occurs when kernel software running inside a Host Virtual Machine (VM) sends improper commands to the GPU Firmware. These commands can trigger access to GPU registers in an unintended way, which may lead to privilege escalation.

Impact Analysis

The impact of this vulnerability is that an attacker with access to the kernel software inside a Host VM could exploit it to escalate their privileges. This means they could gain higher-level access than intended, potentially compromising the security and integrity of the system.

Hi! I’m here to help you understand CVE-2026-45196. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70