CVE-2025-10865: GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free.
Improper reference counting on an internal resource caused scenario where potential for use after free was present.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10865?
CVE-2025-10865 has a moderate severity rating due to the potential for use after free vulnerabilities affecting GPU resource management.
How do I fix CVE-2025-10865?
To mitigate CVE-2025-10865, update the Imagination Technologies DDK to version 25.3 or later.
What types of systems are impacted by CVE-2025-10865?
CVE-2025-10865 affects systems running Imagination Technologies DDK versions before 25.3.
What are the potential consequences of CVE-2025-10865?
Exploiting CVE-2025-10865 may lead to improper GPU operations and potential system instability.
Who is affected by CVE-2025-10865?
Users of the Imagination Technologies DDK who operate GPU resources as non-privileged users may be affected by CVE-2025-10865.