PatchTheCVECVE-2026-21734: A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a wri
CVE-2026-21734 is a high-severity flaw (CVSS 7.7) affecting ddk. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.7 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 95%) |
| CISA exploited list | No |
| Weakness | CWE-823 |
| Published | 2026-06-26 |
| Last modified | 2026-10-25 |
Last updated 2026-10-25 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-21734?
ddk: upgrade to newer than 25.2. Exact commands for each OS are on this page.
Is CVE-2026-21734 being exploited?
CVE-2026-21734 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-21734 affect?
CVE-2026-21734 affects ddk. Severity is high (CVSS 7.7). A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privil
How urgent is CVE-2026-21734?
Priority 28/100. High severity
Related CVEs
- CVE-2026-45195 HIGH 7.8 UPGRADE Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigg
- CVE-2026-34196 HIGH 7.8 UPGRADE Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer
- CVE-2026-41154 HIGH 7.8 UPGRADE Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU AP
- CVE-2026-7639 HIGH 7.8 UPGRADE Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causin
- CVE-2026-45196 HIGH 7.8 UPGRADE Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigg