A high-severity Use After Free vulnerability in the Imagination Graphics DDK could allow an authenticated local attacker to achieve kernel-level memory corruption.

This is a Use After Free (CWE-416) vulnerability occurring within the kernel due to improper handling of GPU system calls. An attacker with local access and low privileges can influence the lifetime of synchronization objects, resulting in read or write operations on freed memory.

The CVSS score of 7.8 reflects a high-severity risk that could lead to full system compromise. Successful exploitation allows an attacker to gain elevated privileges or cause a system crash, resulting in significant data exposure and potential denial of service for mission-critical graphics workloads.

Immediate Action: Update the Imagination Graphics DDK to the fixed versions, which include 1.18 RTM2, 23.2 RTM2, or 26.1 RTM2, depending on your deployment branch.

Proactive Monitoring: Monitor system logs for unusual kernel-level activity or repeated application crashes that may indicate exploitation attempts targeting GPU drivers.

Compensating Controls: Limit access to the affected system to trusted users only, as the attack requires local execution capabilities to initiate the malicious GPU system calls.

Public Exploit Available: No

Given the potential for kernel-level memory corruption and privilege escalation, this vulnerability presents a significant security risk. System administrators should prioritize the deployment of the vendor-provided patches to the Graphics DDK to ensure kernel stability and prevent unauthorized access.