CVE-2025-58408: GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free.
The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in which the reference counts can become unbalanced. This can lead to the premature destruction of a resource while in use.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58408?
CVE-2025-58408 is considered a medium severity vulnerability due to its potential to cause kernel exceptions and lead to instability in the system.
How do I fix CVE-2025-58408?
To mitigate CVE-2025-58408, it is recommended to update the Imagination Technology DDK to version 25.2 or later.
What does CVE-2025-58408 affect?
CVE-2025-58408 affects the Imagination Technology DDK versions up to and including 25.2.
What kind of issues can CVE-2025-58408 cause?
CVE-2025-58408 can lead to improper GPU system calls, resulting in the exposure of stale data and possible use-after-free conditions.
Who is affected by CVE-2025-58408?
Non-privileged users running software that utilizes affected versions of the Imagination Technology DDK are at risk from CVE-2025-58408.