CVE-2025-0467: GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0467?
CVE-2025-0467 is classified as a high severity vulnerability that could allow a Guest VM to exploit memory shared with the GPU firmware.
How do I fix CVE-2025-0467?
To fix CVE-2025-0467, update the Imagination Technologies GPU driver to a version higher than 24.3.
What impact does CVE-2025-0467 have on my system?
CVE-2025-0467 can allow unauthorized access to memory outside the Guest's allocated GPU memory, potentially leading to data leakage or privilege escalation.
Who is affected by CVE-2025-0467?
CVE-2025-0467 affects systems running Imagination Technologies DDK versions up to and including 24.3 that utilize virtualized GPUs.
Is CVE-2025-0467 being actively exploited?
As of the latest updates, there is no public indication that CVE-2025-0467 is actively being exploited in the wild.