CVE-2026-15465 · Infrastructure
NO FIX YET
A local program running as a non-privileged user can make improper GPU system calls through the DDK kernel module interface. Under unsupported use, a use-after-free can corrupt kernel memory, destabilise the platform, or reboot the system.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Systems with the affected GPU DDK kernel module loaded, where unprivileged users or software can reach its interface. The sources do not name the affected products or versions, so the exact scope is unknown.
Not affected if no-gpu-ddk-module, no-untrusted-local-users
Who cares embedded, gpu-driver, linux
Unknown from the sources.
No fix yet, per the sources.
Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.
The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.