CVE-2026-45202
Received Received - Intake

GPU Memory Leak in Linux Kernel

Vulnerability report for CVE-2026-45202, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: imaginationtech

Description

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free event.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-415 The product calls free() twice on the same memory address.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves software running as a non-privileged user making GPU system calls that lead to GPU memory leaks and potential kernel heap corruption. Memory free paths fail to maintain state data for higher order allocations, which can cause memory leaks or double free events.

Detection Guidance

This vulnerability involves GPU memory leaks and kernel heap corruption due to improper memory free paths. Detection requires monitoring GPU memory usage and kernel logs for unusual memory patterns or corruption events. Check for elevated GPU memory consumption over time or kernel errors related to memory management. Use system monitoring tools like 'nvidia-smi' for NVIDIA GPUs or 'glxinfo' for OpenGL information to inspect GPU memory usage. Examine kernel logs with 'dmesg' or 'journalctl -k' for memory-related errors.

Impact Analysis

The vulnerability may cause system instability due to memory leaks or corruption. It could lead to crashes, performance degradation, or unexpected behavior in applications using GPU resources.

Compliance Impact

This vulnerability could lead to memory leaks or kernel heap corruption, potentially exposing sensitive data processed by the GPU. This may violate data protection requirements under GDPR (e.g., Article 32 on security of processing) and HIPAA (e.g., safeguards for protected health information).

Mitigation Strategies

Update or patch the affected software to ensure proper memory management in GPU system calls. Restrict non-privileged users from executing GPU-related operations if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45202. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart