CVE-2025-46708: GPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs
Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Use GPU/device isolation so a guest VM cannot interfere with or block GPU processing for other guest VMs (e.g., isolate GPU access per guest/tenant rather than sharing the same GPU device across guests).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46708?
CVE-2025-46708 is categorized as a high severity vulnerability due to its potential impact on GPU resource sharing among guest VMs.
How do I fix CVE-2025-46708?
To fix CVE-2025-46708, ensure that you are using the latest version of the affected software and apply any available security patches.
What are the potential threats posed by CVE-2025-46708?
CVE-2025-46708 may allow a compromised Guest VM to execute improper GPU system calls, which can disrupt operations of other Guest VMs.
Who is affected by CVE-2025-46708?
CVE-2025-46708 primarily affects users running Google Android in environments with multiple guest virtual machines.
When was CVE-2025-46708 published?
CVE-2025-46708 was published as part of the security bulletin on September 1, 2025.