CVE-2026-15466 Details
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF. The race condition in the destruction path could lead to reference counter being decremented in non-atomical way allowing other code paths using a freed object to read and/or write kernel heap memory.
A race condition vulnerability has been identified in the GPU driver from Imagination Technologies, specifically in the software development kit (SDK) released prior to version 25.2 RTM. The vulnerability arises when software, running as a non-privileged user, makes improper GPU system calls. This mismanagement creates a race condition in the destruction path of hardware performance counters, allowing for a use-after-free (UAF) scenario. The UAF condition can be exploited to read from or write to kernel heap memory, potentially leading to arbitrary memory corruption.
Users can update to the latest version of the Imagination Technologies GPU driver development kit (DDK) to address this vulnerability. The DDK has been revised to manage GPU system calls correctly, ensuring that resources are not freed prematurely while references still exist.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 30, 2026CISA-ADP
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.imaginationtech.com/gpu-driver-vulnerabilities/ | imaginationtech | AdvisoryBundleVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | imaginationtech |
Affected Products
| Product | Versions |
|---|---|
| Imagination Technologies GPU DDK | <= 25.2 RTM <= 25.3 RTM <= 26.1 RTM1 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | CVE Modified | CISA-ADP |
| Oct 30, 2026 | New CVE Received | imaginationtech |