CVE Catalog
CVE-2026-0163
CriticalCVSS 9.8Summary
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
The risk includes remote privilege escalation, potentially allowing an attacker to gain elevated privileges and compromise system security.
Recommendation
It is recommended to apply vendor patches and monitor systems for unusual activity.
Original NVD description (English source)
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.