CVE-2026-45202: GPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`
Published Aug 21, 2026
·Updated
Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption.
Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free event.
Affected Software
1 affected component
GPU DDK
Event History
Aug 21, 2026
CVE Published
via MITRE·04:09 AM
Data Sourced
via MITRE·04:09 AM
DescriptionWeakness
Frequently Asked Questions
1
Who can trigger the issue?
A non-privileged user can trigger it by running software that makes GPU system calls. Systems where untrusted local users or applications can access the GPU driver are therefore exposed.
2
What impact can exploitation have?
The affected GPU memory free paths can leak GPU memory and may cause a double-free condition. The described potential consequence is kernel heap corruption.