CVE-2026-34196 Details

A vulnerability exists in the Imagination Technologies GPU Driver Development Kit (DDK) that allows software running as a non-privileged user to exploit improper GPU system calls. This exploitation can cause an integer overflow, resulting in two GPU virtual addresses being mapped to the same physical address. One of these virtual mappings can be freed along with the physical page, creating a read/write use-after-free condition via the second mapping. The second virtual mapping refers to a physical address that has been freed after the first virtual mapping, allowing the physical memory to be reallocated by another process and read or written to.

The DDK kernel module has been updated to address this vulnerability by implementing better safeguards against integer overflows, ensuring that such exploitation cannot occur.