PT-2026-41258 · Unknown · Npu Firmware

CVE-2026-0427 · Published 2026-05-15 · Updated 2026-05-15

Positive Technologies (AI Summary)

CVSS v4.0

4.6

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions GPU firmware (affected versions not specified)

Description Improper cleanup of shared register resources in GPU firmware allows an attacker with administrative privileges in a Guest Virtual Machine (VM) to access these resources from another Guest VM. This could lead to a loss of confidentiality, integrity, or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2026-0427

Affected Products

Npu Firmware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-0427 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html · Note
• https://t.me/CVEtracker/53873 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2055162457203610074 · Twitter Post