---
id: "CVE-2026-74912"
kind: "vulnerability"
aliases: ["CVE-2026-74912"]
title: "GPU driver: security fix for CVE-2026-49746 breaks buffer mapping outside 0-4GB"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["gpu", "infrastructure", "kernel-driver", "linux-or-windows-unknown"]
not_affected_if: ["cve-2026-49746-fix-not-applied", "no-gpu"]
published_at: "2026-10-30T02:17:09+00:00"
first_seen_at: "2026-10-30T02:28:06+00:00"
updated_at: "2026-10-30T02:30:11+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74912", "first_seen_at": "2026-10-30T02:28:06+00:00"}]
---

# GPU driver: security fix for CVE-2026-49746 breaks buffer mapping outside 0-4GB

With the fix for CVE-2026-49746 applied, GPU graphics buffers can only be mapped within a 0 to 4GB range, and mapping outside that range fails. The sources describe an integer truncation when mapping GPU buffer pages that limits the kernel mode driver's functionality, and do not describe an attacker gain.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-30T02:28:06+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-74912

## From the sources

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.

Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_