CVE-2026-45199

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Kernel software running within a Guest VM can send improper commands to the GPU Firmware, leading to out-of-bounds memory accesses. This occurs because the rgxfw to ptr() function fails to reject firmware private data pointers, allowing data to be written outside the virtualized GPU memory of the Guest VM. This flaw can be exploited to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.