1. Home
  2. CVE Database
  3. CVE-2026-49743
HIGH · 7.8

CVE-2026-49743

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During wo...

Vulnerability Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlying synchronisation primitive is not properly incremented. This can be exploited, by destroying the exported fence and prematurely release the underlying primitive, resulting in a potential use-after-free condition.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ImaginationtechDdk< 26.1
GoogleAndroid-
LinuxLinux Kernel-

Related Weaknesses (CWE)

CWE-416

References

FAQ

What is CVE-2026-49743?

CVE-2026-49743 is a vulnerability with a CVSS score of 7.8 (HIGH). Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During wo...

How severe is CVE-2026-49743?

CVE-2026-49743 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-49743?

Check the references section above for vendor advisories and patch information. Affected products include: Imaginationtech Ddk, Google Android, Linux Linux Kernel.