CVE-2026-45201

Name of the Vulnerable Software and Affected Versions GPU DDK (affected versions not specified)

Description Non-privileged users can perform improper GPU system calls by passing an invalid log2 page size during the allocation of physical pages. This occurs due to improper validation of the value within the PhysmemNewRamBackedPMR() function. A crafted log2 page size can cause 4K pages to be treated as higher order pages, enabling out-of-bounds (OOB) read and write access to physical memory beyond the 4K threshold.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.