This vulnerability arises from the sharing of secure memory allocations among multiple secure GPU processes within the Imagination Technologies Graphics DDK kernel module. An attacker controlling one secure GPU process can cooperatively pass data to another secure GPU process, violating process isolation. Additionally, the attacker can disrupt the operation of other secure GPU processes, causing image corruption or triggering GPU hardware recovery mechanisms. The root cause is improper isolation or compartmentalization of secure GPU processes, classified under CWE-653.

The vulnerability enables unauthorized data sharing between secure GPU processes, potentially leading to data leakage or corruption of shared resources. It also allows disruption of other secure GPU processes, resulting in image corruption and forced GPU hardware recovery. This could degrade system stability and compromise the integrity of GPU operations relying on secure processes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published by Imagination Technologies at this time.