CVE-2026-45197

Name of the Vulnerable Software and Affected Versions GPU DDK (affected versions not specified)

Description Kernel software running within a Guest VM can send improper commands to the GPU Firmware, enabling unauthorized read or write operations outside the virtualized GPU memory. This occurs due to a TOCTOU (Time-of-Check to Time-of-Use) bug—a race condition where a system checks a condition and then uses the result, but the condition changes between the check and the use—affecting psFWMemContext->uiPageCatBaseRegSet. This flaw allows the results of initial memory access validations to be invalidated before the data is actually used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.