This vulnerability involves improper isolation of secure GPU processes in the Imagination Technologies Graphics DDK. Specifically, secure memory allocations are shared among different secure GPU processes via the kernel module, enabling an attacker to cooperatively pass data between these processes. Additionally, this shared resource can be corrupted by an attacker, disrupting the operation of other secure GPU processes and causing image corruption or triggering GPU hardware recovery. The issue is classified under CWE-653, indicating a failure in compartmentalization or isolation mechanisms. The CVSS v3.1 base score is 5.5 (medium severity), with local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability.

The vulnerability allows an attacker with local privileges to interfere with secure GPU processes by sharing and corrupting secure memory allocations. This can lead to disruption of GPU operations, including image corruption and forced GPU hardware recovery, impacting system availability. There is no direct impact on confidentiality or integrity according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Imagination Technologies advisories for updates. Until a fix is available, restricting local access to trusted users and minimizing exposure to untrusted code with GPU access may reduce risk.