Vulnerability Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages. A memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of control (firmware) can be freed while in use. Software installed and run as a non-privileged user may replace that buffer with another and replace a shared resource (memory page address list) managed by the CPU thread of control (driver) leading to the GPU accessing memory not managed by the CPU thread of control (driver).
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-65586?
CVE-2026-65586 is a documented vulnerability. Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to ...
How severe is CVE-2026-65586?
CVSS scoring is not yet available for CVE-2026-65586. Check NVD for updates.
Is there a patch for CVE-2026-65586?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.