{"id":"CVE-2026-15465","kind":"vulnerability","aliases":["CVE-2026-15465"],"related":[],"title":"Arm Mali GPU driver: unprivileged use-after-free can corrupt kernel memory","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.\n\n\n\nThe weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.","summary":"A local program running as a non-privileged user can make improper GPU system calls through the DDK kernel module interface. Under unsupported use, a use-after-free can corrupt kernel memory, destabilise the platform, or reboot the system.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","gpu-driver","infrastructure","linux"],"not_affected_if":["no-gpu-ddk-module","no-untrusted-local-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-13T02:18:56+00:00","first_seen_at":"2026-11-13T02:41:37+00:00","triaged_at":"2026-11-13T02:43:16+00:00","updated_at":"2026-11-13T02:43:16+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-13T02:43:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Arm Mali GPU driver: unprivileged use-after-free can corrupt kernel memory","impact":"high","summary":"A local program running as a non-privileged user can make improper GPU system calls through the DDK kernel module interface. Under unsupported use, a use-after-free can corrupt kernel memory, destabilise the platform, or reboot the system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["gpu-driver","linux","embedded"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"kernel memory corruption leading to instability or reboot","analyst_note":"Identify affected DDK/driver products and fixed versions from the NVD entry and vendor advisory; the sources give none.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-gpu-ddk-module","no-untrusted-local-users"],"who_is_affected":"Systems with the affected GPU DDK kernel module loaded, where unprivileged users or software can reach its interface. The sources do not name the affected products or versions, so the exact scope is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000686,"input_tokens":4594,"output_tokens":453,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-15465':16A,19A '-2026':15A,18A 'access':127C 'arm':1A 'behaviour':141C 'call':41B,82C 'condit':100C 'conduct':78C 'corrupt':11A,57B,109C,134C 'crash':143C 'cve':14A,17A 'data':137C 'ddk':44B,85C 'destabilis':60B 'driver':4A,23B 'embed':20B 'execut':145C 'free':9A,55B,99C,130C 'gpu':3A,22B,39B,80C 'gpu-driv':21B 'improp':38B,79C 'infrastructur':24B 'instabl':111C 'instal':68C 'interfac':47B,88C,94C 'kernel':12A,45B,58B,86C,107C 'lead':105C 'linux':25B 'local':27B 'make':37B 'mali':2A 'may':77C,101C,131C 'memori':13A,59B,108C,121C,128C 'modul':46B,87C 'non':33B,74C 'non-privileg':32B,73C 'occur':102C,117C 'oper':148C 'platform':62B,110C 'privileg':34B,75C 'process':142C 'program':28B,140C 'reboot':64B,114C 'refer':120C 'releas':126C 'result':132C 'run':29B,70C 'softwar':67C,119C 'structur':138C 'system':40B,66B,81C,113C 'unexpect':139C 'unintend':147C 'unprivileg':5A 'unsupport':49B,90C 'use':7A,50B,53B,91C,97C 'use-after-fre':6A,52B,96C 'user':35B,76C 'valid':136C 'weak':116C","nicknames":[],"mitigations":[],"who_affected":"Systems with the affected GPU DDK kernel module loaded, where unprivileged users or software can reach its interface. The sources do not name the affected products or versions, so the exact scope is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["embedded","gpudriver","infrastructure","linux","unknown"],"campaign_type":null,"search_a":"'-15465':16A,19A '-2026':15A,18A 'arm':1A 'corrupt':11A 'cve':14A,17A 'driver':4A 'free':9A 'gpu':3A 'kernel':12A 'mali':2A 'memori':13A 'unprivileg':5A 'use':7A 'use-after-fre':6A","search_b":"'call':41B 'corrupt':57B 'ddk':44B 'destabilis':60B 'driver':23B 'embed':20B 'free':55B 'gpu':22B,39B 'gpu-driv':21B 'improp':38B 'infrastructur':24B 'interfac':47B 'kernel':45B,58B 'linux':25B 'local':27B 'make':37B 'memori':59B 'modul':46B 'non':33B 'non-privileg':32B 'platform':62B 'privileg':34B 'program':28B 'reboot':64B 'run':29B 'system':40B,66B 'unsupport':49B 'use':50B,53B 'use-after-fre':52B 'user':35B","search_c":"'access':127C 'behaviour':141C 'call':82C 'condit':100C 'conduct':78C 'corrupt':109C,134C 'crash':143C 'data':137C 'ddk':85C 'execut':145C 'free':99C,130C 'gpu':80C 'improp':79C 'instabl':111C 'instal':68C 'interfac':88C,94C 'kernel':86C,107C 'lead':105C 'may':77C,101C,131C 'memori':108C,121C,128C 'modul':87C 'non':74C 'non-privileg':73C 'occur':102C,117C 'oper':148C 'platform':110C 'privileg':75C 'process':142C 'program':140C 'reboot':114C 'refer':120C 'releas':126C 'result':132C 'run':70C 'softwar':67C,119C 'structur':138C 'system':81C,113C 'unexpect':139C 'unintend':147C 'unsupport':90C 'use':91C,97C 'use-after-fre':96C 'user':76C 'valid':136C 'weak':116C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T02:18:56+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-15465","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15465","severity":null,"published_at":"2026-11-13T02:18:56+00:00","modified_at":"2026-11-13T02:18:56+00:00","first_seen_at":"2026-11-13T02:41:37+00:00","fetched_at":"2026-11-13T02:41:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}