4.4Medium

CVE-2026-0001Mali GPU Kernel Driver allows access to already freed memory

Arm Ltd Bifrost GPU Kernel Driver; Arm Ltd Valhall GPU Kernel Driver; Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver Published: (2 months ago)

Description

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.

Weakness (CWE): CWE-416

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver r41p0 – ≤ r49p5, r50p0 – ≤ r54p3, r55p0, fixed r56p0
Arm Ltd Bifrost GPU Kernel Driver r41p0 – ≤ r49p5, r50p0 – ≤ r51p0, r54p1 – ≤ r54p2
Arm Ltd Valhall GPU Kernel Driver r41p0 – ≤ r49p5, r50p0 – ≤ r54p3, r55p0, fixed r56p0

References and patches