{"id":"CVE-2026-74912","kind":"vulnerability","aliases":["CVE-2026-74912"],"related":[],"title":"GPU driver: security fix for CVE-2026-49746 breaks buffer mapping outside 0-4GB","description":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.","summary":"With the fix for CVE-2026-49746 applied, GPU graphics buffers can only be mapped within a 0 to 4GB range, and mapping outside that range fails. The sources describe an integer truncation when mapping GPU buffer pages that limits the kernel mode driver's functionality, and do not describe an attacker gain.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["gpu","infrastructure","kernel-driver","linux-or-windows-unknown"],"not_affected_if":["cve-2026-49746-fix-not-applied","no-gpu"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-30T02:17:09+00:00","first_seen_at":"2026-10-30T02:28:06+00:00","triaged_at":"2026-10-30T02:30:11+00:00","updated_at":"2026-10-30T02:30:11+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-30T02:30:11Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"GPU driver: security fix for CVE-2026-49746 breaks buffer mapping outside 0-4GB","impact":"low","summary":"With the fix for CVE-2026-49746 applied, GPU graphics buffers can only be mapped within a 0 to 4GB range, and mapping outside that range fails. The sources describe an integer truncation when mapping GPU buffer pages that limits the kernel mode driver's functionality, and do not describe an attacker gain.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["gpu","kernel-driver","linux-or-windows-unknown"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown; sources describe only functionality errors in the kernel mode driver","analyst_note":"Check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-74912 and the vendor bulletin for affected driver versions, the fixed version, and whether the flaw has a security impact beyond a functionality error.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-gpu","cve-2026-49746-fix-not-applied"],"who_is_affected":"Systems with GPUs that have the security fix for CVE-2026-49746 applied, where the kernel mode driver maps graphics buffers. The sources do not name the affected drivers or versions. Systems without that fix, or without GPUs, are not indicated as affected.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000703,"input_tokens":4143,"output_tokens":577,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':7A,17A,20A,37B,95C '-4':14A '-49746':8A,38B,96C '-74912':18A,21A '0':13A,49B '0gb':129C '4gb':51B,130C 'appli':39B,97C 'attack':83B 'break':9A 'buffer':10A,42B,68B,103C,122C,126C 'caus':107C,118C 'cve':6A,16A,19A,36B,94C 'describ':61B,81B 'driver':2A,26B,75B,141C 'error':108C,132C 'fail':58B 'fix':4A,34B,92C 'function':77B,136C 'gain':84B 'gb':15A 'gpu':1A,22B,40B,67B,86C,121C 'graphic':41B,102C 'infrastructur':23B 'integ':63B,116C 'kernel':25B,73B,139C 'kernel-driv':24B 'limit':71B,105C,134C 'linux':28B 'linux-or-windows-unknown':27B 'map':11A,46B,54B,66B,99C,111C,120C 'mode':74B,140C 'outsid':12A,55B,112C 'page':69B,123C 'produc':131C 'rang':52B,57B,100C,115C,128C 'secur':3A,90C 'sourc':60B 'system':87C 'truncat':64B,117C 'unknown':31B 'vulner':91C 'window':30B 'within':47B","nicknames":[],"mitigations":[],"who_affected":"Systems with GPUs that have the security fix for CVE-2026-49746 applied, where the kernel mode driver maps graphics buffers. The sources do not name the affected drivers or versions. Systems without that fix, or without GPUs, are not indicated as affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T02:17:09+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-74912","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74912","severity":null,"published_at":"2026-10-30T02:17:09+00:00","modified_at":"2026-10-30T02:17:09+00:00","first_seen_at":"2026-10-30T02:28:06+00:00","fetched_at":"2026-10-30T02:28:06+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}