This vulnerability involves a use-after-free (CWE-416) condition in the Imagination Technologies Graphics DDK. Specifically, when a GPU workload submission includes a fence exported by the GPU driver, the reference count for the underlying synchronization primitive is not properly incremented. An attacker running software as a non-privileged user can exploit this by destroying the exported fence prematurely, causing the synchronization primitive to be released early. This improper lifetime management can lead to read/write use-after-free conditions in kernel memory, potentially allowing for escalation of privileges or system instability.

Successful exploitation can lead to high impact on confidentiality, integrity, and availability of the affected system. The use-after-free condition may allow an attacker to read or write kernel memory improperly, potentially leading to privilege escalation, data corruption, or system crashes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published at this time. Until a patch is available, avoid running untrusted software that may interact with the GPU driver or synchronization primitives.