CVE-2025-58410
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.
Risk Assessment
The risk includes privilege escalation, as a non-privileged user could gain write access to read-only memory, potentially leading to system and data integrity breaches.
Recommendation
It is recommended to update GPU drivers and software to versions that properly handle memory protections, and restrict GPU resource access for non-privileged users.
Other vulnerabilities in GPU drivers
See all- CVE-2026-16280Critical
In GPU drivers, an integer overflow when calculating physical offsets for sparse PMRs may cause 32-bit truncation for PMRs larger than 4 GB, leading to incorrect GPU MMU mappings and potential access to unintended physical memory.
- CVE-2026-41154High
A vulnerability in the sparse memory implementation of GPU drivers allows out-of-bounds (OOB) kernel memory reads or writes. The flaw occurs when indexing pages larger than 4 kB in the page freeing logic, leading to incorrect buffer access.
Original NVD description (English source)
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS