high
advisory
GPU pdma: Local privilege escalation (CVE-2026-20558)
A use-after-free vulnerability in the GPU pdma component allows local privilege escalation without requiring user interaction.
CVE search metadata
CVE search record: CVE-2026-20558. Severity: high. CVSS: 8.4. KEV: no. Product: GPU pdma. Brief: GPU pdma: Local privilege escalation (CVE-2026-20558). Brief link: https://feed.craftedsignal.io/briefs/2026-11-cve-2026-20558/
Triage facts
Revision 1- Applicability
- GPU pdma
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 2, 17:51 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-20558 describes a use-after-free vulnerability in the GPU pdma component. This allows for local privilege escalation without the need for additional execution privileges or user interaction. Patch ID ALPS11365070 (Issue ID: MSV-9547) has been identified for this issue.
Impact
Successful exploitation allows a local attacker to escalate their privileges.
Mitigations
Apply patch ALPS11365070
CVE-2026-20558