What is GHSA-q7pr-p3c5-mgvj?

GHSA-q7pr-p3c5-mgvj is a security advisory published by GitHub Security Advisories with High severity. Software installed and run as a non-privileged user may conduct improper GPU system calls to...

Which CVE IDs does GHSA-q7pr-p3c5-mgvj cover?

GHSA-q7pr-p3c5-mgvj covers the following CVE IDs: CVE-2026-34192. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q7pr-p3c5-mgvj?

GHSA-q7pr-p3c5-mgvj has a CVSS v3 base score of 7.7, published by GitHub Security Advisories.

GHSA-q7pr-p3c5-mgvjHighCVSS 7.7

Software installed and run as a non-privileged user may conduct improper GPU system calls to...

Vendor

GitHub Security Advisories

Published

June 19, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-34192 →

📋 Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables.

The vulnerability allows physical memory allocated for MMU page tables to be used after being freed. This was caused by an error path that would not cleanup properly before freeing the physical allocation.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-34192
https://www.imaginationtech.com/gpu-driver-vulnerabilities
https://github.com/advisories/GHSA-q7pr-p3c5-mgvj