CVE-2025-0468 — Improper Handling of Insufficient Permissions or Privileges in Cbl2 Kernel 5.15.92.1-1 ON CBL Mariner 2.0

CWE-280 — Improper Handling of Insufficient Permissions or PrivilegesCWE-416 — Use After Free4 documents4 sources
Severity
7.1HIGHNVD
EPSS
0.1%
top 80.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Imagination Technologies Graphics DDKGoogle AndroidMsrc Cbl2 Kernel 5.15.92.1-1 ON CBL Mariner 2.0+3 more
Timeline
PublishedApr 4
Latest updateJun 1

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages6 packages

▶CVEListV5imagination_technologies/graphics_ddk1.15 RTM — 24.3 RTM

🔴Vulnerability Details

1
GHSA
GHSA-88rv-3gw6-829j: Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory page↗2025-04-04
▶

📋Vendor Advisories

2
Android
CVE-2025-0468: PowerVR-GPU↗2025-06-01
▶
Microsoft
A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer der↗2023-01-10
▶