CVE-2025-10865CWE-416

GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns

High · published January 13, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

⚡ A mismanaged reference count in GPU calls might just open the door to a sneaky use-after-free scenario! Think of it like a restaurant where a waiter forgets to clear a table after a customer leaves, allowing the next seat-filler to accidentally sit on a used plate. If the system calls don’t properly track resources, they could end up using something that’s no longer available. This vulnerability can lead to serious instability in applications, potentially crashing them or allowing attackers to manipulate memory. If an attacker exploits this, they could execute arbitrary code with the privileges of the user running the application, which could be a disaster!

Put simply

Think of it like a restaurant where a waiter forgets to clear a table after a customer leaves, allowing the next seat-filler to accidentally sit on a used plate. If the system calls don’t properly track resources, they could end up using something that’s no longer available. This issue arises due to improper reference counting on GPU system calls, allowing a use after free condition to occur. Essentially, the software might access freed memory, causing unpredictable behavior.

What to do

This vulnerability can lead to serious instability in applications, potentially crashing them or allowing attackers to manipulate memory. If an attacker exploits this, they could execute arbitrary code with the privileges of the user running the application, which could be a disaster! Make sure to update to the latest version that addresses this flaw and review your code for proper reference counting practices in GPU calls. Regularly patch your software to mitigate such risks in the future. You've got this! Stay proactive, patch up, and keep your system secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.4th percentile
Weakness
CWE-416 · Use After Free
Published
2026-01-13T17:26Z
EPSS history
Timeline
  • 13 JAN 17:26Z
    GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns
    cvelistv5