CVE-2026-65586
Software installed and run as a non-privileged user may conduct improper GPU system calls to free…
- Risk score
- 43/100
- CVSS
- 7.1 v3.1
- Exploit chance (30 days)
- 0.1%
- Published
- 30 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages. A memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of cont…
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.1 high
References
Original description
Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages. A memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of control (firmware) can be freed while in use. Software installed and run as a non-privileged user may replace that buffer with another and replace a shared resource (memory page address list) managed by the CPU thread of control (driver) leading to the GPU accessing memory not managed by the CPU thread of control (driver).
Last activity 30 Oct 2026. Patch Forecast updates every hour.