CVE-2026-15465
GPU DDK - Write UAF in OSDebugSignalPID due to incorrect management of PID resources
Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.
The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.
What each source reports
CVE ListNo score
GPU DDK - Write UAF in OSDebugSignalPID due to incorrect management of PID resources
Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.
The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.
- Record
CVE-2026-15465- Weakness
- CWE-416
- Updated
- 2026-11-13
EUVDEUVD-2026-124824No score
Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.
The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.
- Record
EUVD-2026-124824- Updated
- 2026-11-13
GitHub AdvisoriesGHSA-m345-9g3f-2jgxNo score
Software installed and run as a non-privileged user may conduct improper GPU system calls through...
Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.
The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.
- Record
GHSA-m345-9g3f-2jgx- Weakness
- CWE-416
- Updated
- 2026-11-13
NVDNo score
Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.
The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.
- Record
CVE-2026-15465- Weakness
- CWE-416
- Updated
- 2026-11-13
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| published | EUVD | |
| published | EUVD | |
| title | CVE List | |
| aliases, cwes, references, title | GitHub Advisories | |
| first indexed | EUVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-15465 is a vulnerability with no CVSS score yet in Imagination Technologies Graphics Ddk, published November 13, 2026. No source lists public exploit code. No source names a fixed version.