4.3Orta

CVE-2025-0932Mali GPU Userspace Driver allows access to already freed memory

Arm Ltd Bifrost GPU Userspace Driver; Arm Ltd Valhall GPU Userspace Driver; Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver Yayım: (1 yıl önce)

Açıklama

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to gain access to already freed memory.This issue affects Bifrost GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0.

Zayıflık türü (CWE): CWE-416

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
arm 5th gen gpu architecture userspace driver r48p0 – < r49p4
Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver r48p0 – ≤ r49p3, r50p0 – ≤ r54p0
Arm Ltd Bifrost GPU Userspace Driver r48p0 – ≤ r49p3, r50p0 – ≤ r51p0
Arm Ltd Valhall GPU Userspace Driver r48p0 – ≤ r49p3, r50p0 – ≤ r54p0

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (6)

  • cpe:2.3:a:arm:5th_gen_gpu_architecture_userspace_driver:*:*:*:*:*:*:*:* ≥ r48p0 < r49p4
  • cpe:2.3:a:arm:5th_gen_gpu_architecture_userspace_driver:*:*:*:*:*:*:*:* ≥ r50p0 < r54p1
  • cpe:2.3:a:arm:bifrost_gpu_userspace_driver:*:*:*:*:*:*:*:* ≥ r48p0 < r49p4
  • cpe:2.3:a:arm:bifrost_gpu_userspace_driver:*:*:*:*:*:*:*:* ≥ r50p0 < r54p1
  • cpe:2.3:a:arm:valhall_gpu_userspace_driver:*:*:*:*:*:*:*:* ≥ r48p0 < r49p4
  • cpe:2.3:a:arm:valhall_gpu_userspace_driver:*:*:*:*:*:*:*:* ≥ r50p0 < r54p1