CVE-2024-43701 – GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices

https://notcve.org/view.php?id=CVE-2024-43701

14 Oct 2024 — Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. El software instalado y ejecutado como un usuario sin privilegios puede realizar llamadas al sistema de GPU para leer y escribir la memoria física liberada de la GPU. • https://www.imaginationtech.com/gpu-driver-vulnerabilities • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-416: Use After Free •