Skip to content
OpenAdvisories
High · 7.5 CVE-2025-58410 EUVD-2025-197806GHSA-c8p4-5648-86r9

GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR

Published Nov 17, 2025 · Updated Nov 17, 2025 · Assigned by imaginationtech

Vendor: Imagination Technologies Product: Graphics DDK

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.

This is caused by improper handling of the memory protections for the buffer resource.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 23.3 RTM – ≤ 25.1 RTM2, 25.2 RTM 1.15 RTM

Advisories 2

References