CVE-2026-16280
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
In GPU drivers, an integer overflow when calculating physical offsets for sparse PMRs may cause 32-bit truncation for PMRs larger than 4 GB, leading to incorrect GPU MMU mappings and potential access to unintended physical memory.
Risk Assessment
The risk includes memory corruption or information disclosure, allowing an unprivileged user to access sensitive data or destabilize the system.
Recommendation
Update GPU drivers to a version that includes a fix preventing integer overflow.
Original NVD description (English source)
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.