CVE-2026-34195 Details

A vulnerability has been identified in the Imagination Technologies GPU Driver Development Kit (DDK) that allows software running as a non-privileged user to exploit the GPU sparse memory API. This exploitation can lead to out-of-bounds writes in the kernel by causing improper management of memory allocations. The issue arises from incorrect indexing of internal states during sparse allocation remapping, which can be manipulated to write data outside the intended memory boundaries.

The DDK kernel module has been updated to address this vulnerability by correcting the management of sparse memory allocations and preventing out-of-bounds writes. Users should upgrade to the latest version of the GPU DDK that includes this fix.