CVE-2026-45200

Name of the Vulnerable Software and Affected Versions GPU DDK (affected versions not specified)

Description Software run by a non-privileged user can perform improper GPU driver IOCTL (Input/Output Control) calls to create a specific allocation scenario. By fabricating a particular combination of flags on the allocation interface, an incorrect double free event occurs during the freeing process, leading to kernel heap corruption. This issue is specifically linked to the FreeOSPages function and the EncodeAllocationFlags function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.