CVE-2025-58411: GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after free scenario.
Improper resource management and reference counting on an internal resource caused scenario where potential write use after free was present.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58411?
CVE-2025-58411 is considered a moderate severity vulnerability due to its potential to cause resource mismanagement and use-after-free scenarios.
How do I fix CVE-2025-58411?
To mitigate CVE-2025-58411, users should upgrade to a patched version of the Imaginationtech DDK beyond version 25.3.
What software is affected by CVE-2025-58411?
CVE-2025-58411 affects versions of the Imaginationtech DDK up to version 25.3.
What type of attack is associated with CVE-2025-58411?
CVE-2025-58411 could be exploited by non-privileged users to conduct improper GPU system calls leading to resource mismanagement.
Is it safe to use Imaginationtech DDK versions below 25.3 after CVE-2025-58411?
Using Imaginationtech DDK versions below 25.3 is not safe due to the existence of CVE-2025-58411 and its associated risks.