CVE-2026-45203

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Kernel software running within a Host VM can send improper commands to the GPU Firmware, leading to a memory write operation outside the permitted range for the host kernel. This is caused by a TOCTOU (Time-of-Check to Time-of-Use) bug, a race condition where a malicious driver modifies memory values after the firmware has validated them but before they are actually used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.