Live › vulnerability › CVE-2026-15466
A race condition in the GPU driver's hardware performance counter buffer destruction path can decrement a reference counter non-atomically. This lets other code use a freed object to read and write kernel heap memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 02:28 UTC. All times on this page are UTC.
Any machine running an affected GPU driver where a non-privileged local user can run software that issues GPU system calls. The sources do not name the affected driver versions or products. Systems without GPUs or with no untrusted local users are likely less exposed, but the sources do not confirm this.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF.
The race condition in the destruction path could lead to reference counter being decremented in non-atomical way allowing other code paths using a freed object to read and/or write kernel heap memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-15466")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.