Arm Mali GPU Kernel Drivers Use-After-Free Vulnerability Allowing Memory Access

Vulnerability

A use-after-free vulnerability has been identified in the Arm Mali GPU Kernel Drivers for Bifrost, Valhall, and Arm 5th Gen GPU Architecture. This vulnerability allows a local non-privileged user process to access already freed memory by performing valid GPU memory processing operations. The issue affects Bifrost GPU Kernel Driver versions r41p0 prior to r49p4 and r50p0 prior to r51p0, as well as Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver versions r41p0 prior to r49p4 and r50p0 prior to r54p0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to freed memory, potentially allowing for memory corruption or other unintended behavior in the system.

Remediation

Users are advised to upgrade to Arm Bifrost GPU Kernel Driver r54p1, Valhall GPU Kernel Driver r54p1, or Arm 5th Gen GPU Architecture Kernel Driver r54p1.

Added: Sep 8, 2025, 1:16 PM
Updated: Sep 8, 2025, 8:27 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
1.3
exploitability
2.9
remediation
7.7
relevance
0.5
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.