7.8
High
CVE-2026-22163 Requires malware code to misuse the DDK kernel module IOCTL interface
Description
Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt to synchronise access to the resource.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Graphics DDK | Versions not published |
Other CVEs of Graphics DDK
The 95 CVEs of Graphics DDK →
CVE-2026-74915
GPU DDK - OOB write in UntwiddlePOTSquare64bpp
8.8
High
CVE-2026-74912
GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB
9.8
Critical
CVE-2026-19199
GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet
7.1
High
CVE-2026-18629
GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation
7.5
High