Imagination Technologies GPU Driver Memory Leak Vulnerability

A vulnerability exists in the Imagination Technologies GPU Driver Development Kit (DDK) that can lead to a memory leak or kernel exceptions. This issue arises from a use-after-free condition, where kernel software running in a Guest VM can improperly read or write kernel heap data after it has been freed. The vulnerability is present in DDK releases up to and including 24.3.

Impact

Exploitation of this vulnerability can cause kernel exceptions, such as null pointer dereferences or use-after-free conditions, leading to potential memory corruption or crashes.

Remediation

The DDK kernel module has been updated to address the memory leak and improper handling of pointers, preventing the associated kernel exceptions.