GPU Use After Free in Linux Kernel

Publication date: 2026-07-10

Last updated on: 2026-07-10

Assigner: imaginationtech

Description

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete cleanup of an internal driver state, allowing for future unauthorized access to the contents of the physical memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-10

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-11

EPSS Evaluated

N/A

NVD

CVE-2026-7639

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-459	The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

Attack-Flow Graph

Executive Summary

This vulnerability occurs when software running as a non-privileged user performs a sequence of improper GPU system calls that cause a use after free condition. This flaw allows unprivileged shader code to access memory it should not be able to access.

Specifically, malicious code can trigger a failure in the Memory Management Unit (MMU) mapping logic, leading to incomplete cleanup of an internal driver state. This incomplete cleanup enables unauthorized future access to the contents of physical memory.

Impact Analysis

The vulnerability can allow unprivileged users or malicious shader code to access physical memory contents that should be protected.

This unauthorized memory access could lead to exposure of sensitive data, compromise of system integrity, or escalation of privileges within the affected system.

Hi! I’m here to help you understand CVE-2026-7639. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70