CVE-2025-58408

MediumCVSS 5.9

Published: 01/12/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The stale data can include handles to resources whose reference counts can become unbalanced, leading to premature destruction of a resource while in use.

Risk Assessment

A local unprivileged attacker could trigger kernel crashes or exploit the use-after-free to escalate privileges or destabilize the system.

Recommendation

Update GPU drivers and the system kernel to versions containing fixes; restrict unprivileged user access to GPU features where possible.

Other vulnerabilities in GPU kernel driver

CVE-2026-65584Low risk· EPSS 7%
Software run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel when processing resolved Linux/Android fence synchronization checkpoints. Successful exploitation can cause kernel memory corruption and typically results in denial of service via kernel crash.

Original NVD description (English source)

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in which the reference counts can become unbalanced. This can lead to the premature destruction of a resource while in use.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS