PULSE
EN
FEED
ransompayload reclama a Stahlbau Mann GmbH · DE · Manufacturingransomn0n reclama a Company #122 · USransomn0n reclama a Company #121 · USransomn0n reclama a Company #120 · USransomn0n reclama a Company #119ransomn0n reclama a Company #118 · AEransomnightspire reclama a REFSA S.A. · AR · Otherransomsilentransomgroup reclama a S... G...ransomqilin reclama a Isapre Consalud · CL · Healthcareransomorova reclama a Harry's International · SG · Retail & E-Commerceransomeverstake reclama a da*****t.com · Technologyransomeverstake reclama a ra*****g.comransomredact reclama a Holland & Knight · US · Professional Servicesransomqilin reclama a Astino Berhad · MY · Manufacturingransompayload reclama a Stahlbau Mann GmbH · DE · Manufacturingransomn0n reclama a Company #122 · USransomn0n reclama a Company #121 · USransomn0n reclama a Company #120 · USransomn0n reclama a Company #119ransomn0n reclama a Company #118 · AEransomnightspire reclama a REFSA S.A. · AR · Otherransomsilentransomgroup reclama a S... G...ransomqilin reclama a Isapre Consalud · CL · Healthcareransomorova reclama a Harry's International · SG · Retail & E-Commerceransomeverstake reclama a da*****t.com · Technologyransomeverstake reclama a ra*****g.comransomredact reclama a Holland & Knight · US · Professional Servicesransomqilin reclama a Astino Berhad · MY · Manufacturing
← Todos los CVEs
CVE Watch25 oct 2026

CVE-2026-41158

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical mem

CVSS

7.8

Alto

EPSS

0.1%

p2

KEV

—

Exploit Today

1

0-100

Publicado: 12 jun 2026 · Última mod.: 25 oct 2026 · CWE-416

EPSS · 30d
0.1%EPSS · 30 días0.2%
2026-10-052026-11-01
Descripción técnica

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the deferred free mechanism can lead to those resources being used for read/write by the GPU after the kernel module has freed the resource.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-590448.4 ALT
—
———In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-589848.4 ALT
—
———In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-589428.4 ALT
—
———In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-588298.4 ALT
—
———In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-588288.4 ALT
—
———In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6hCVE-2026-588278.4 ALT
—
———In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.6h