CVE-2024-46975CWE-270

GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping

High · published February 22, 2025

CVSS v3.1
7.9
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory.

The record
Technical detail
CVSS v3.1
7.9 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Weakness
CWE-270 · Privilege Context Switching Error
Published
2025-02-22T14:44Z
EPSS history
Timeline
  • 22 FEB 14:44Z
    GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping
    cvelistv5