PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-22164 Imagination Technologies CVE debrief

CVE-2026-22164 is a HIGH severity vulnerability with a CVSS score of 7.5. The vulnerability allows software installed and run as a non-privileged user to conduct improper GPU system calls, potentially corrupting kernel heap memory. An exploit can be used to corrupt kernel memory by creating resources of certain types and presenting a set of parameters to the affected interface.

Vendor
Imagination Technologies
Product
Graphics DDK
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-08
Original CVE updated
2026-07-23
Advisory published
2026-06-08
Advisory updated
2026-07-23

Who should care

Users of the affected product from Unknown Vendor should take immediate action to assess and mitigate the risk associated with this vulnerability.

Technical summary

The vulnerability has a CVSS vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. It is classified under CWE-122.

Defensive priority

HIGH

Recommended defensive actions

  • Assess the vulnerability's impact on your organization.
  • Apply patches or mitigations provided by the vendor, if available. See resourceLinkAnnotations [ref-4] for more information.
  • Restrict access to the affected interface to only privileged users.

Evidence notes

The vendor is listed as Unknown Vendor, but there is evidence suggesting the vendor might be Imaginationtech [source-item].

Sources and references

Verified primary and authoritative sources

  • CVE-2026-22164 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-22164

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-22164 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-22164

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.imaginationtech.com/gpu-driver-vulnerabilities/

    367425dc-4d06-4041-9650-c2dc6aaa27ce

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.