CVE-2026-22164: GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical

Synopsis

A kernel heap out-of-bounds write vulnerability exists in the Imagination Technologies Graphics DDK, specifically in the DevmemIntComputeVirtualIndicesFromLogical interface. The vulnerability is reachable over the network with no authentication required and no user interaction needed, as described by the CVSS vector. Successful exploitation allows an attacker to corrupt kernel heap memory, resulting in a denial of service against the affected system. A patched-image rebuild at fix versions 1.18 RTM and 23.2 RTM is available on HarborGuard for environments running an affected DDK version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable interface is exposed over the network, meaning an attacker must be able to reach the service remotely to deliver malicious GPU system calls.

• AuthenticationNot required

  No credentials or account are needed; an unauthenticated attacker can interact with the affected interface directly.

• Victim interactionNot required

  No action from a logged-in user or administrator is required for the exploit to succeed.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other unpredictable environmental factors.

Blast Radius

• A successful attacker corrupts kernel heap memory on the affected host, which crashes the kernel and takes down the entire system.
• All workloads running on the affected node lose availability for the duration of the crash and any subsequent restart cycle.
• Kernel heap corruption can render the host unresponsive to orchestration signals, potentially triggering cascading rescheduling pressure across a cluster.