GHSA-6892-6w2m-w923HighCVSS 7.8

Software installed and run as a non-privileged user may conduct improper GPU system calls causing...

Published
October 30, 2026
Last Modified
November 6, 2026

🔗 CVE IDs covered (1)

📋 Description

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Linux/Android fence synchronization checkpoints, while user checkpoints are excluded from the stack array. Successful exploitation can cause kernel memory corruption and typically results in a denial-of-service condition through a kernel crash.

The code vulnerability is a buffer write beyond the allocated array on the stack caused by copying excessive data from an internal buffer.

🔗 References (3)