Use After Free Vulnerability in Arm Ltd GPU Kernel Drivers

CVE-2025-0819

What is CVE-2025-0819?

A Use After Free vulnerability exists in the GPU kernel drivers developed by Arm Ltd, specifically in the Bifrost and Valhall architectures. This flaw enables a local non-privileged user process to perform valid memory operations on previously freed memory, potentially leading to unauthorized access or exploitation. Affected versions include various releases of the Bifrost GPU Kernel Driver (r44p0 through r49p3 and r50p0 through r51p0), Valhall GPU Kernel Driver (r44p0 through r49p3 and r50p0 through r54p0), and the Arm 5th Gen GPU Architecture Kernel Driver (r44p0 through r49p3 and r50p0 through r54p0). It is crucial for users to be aware of this vulnerability and to ensure that their systems are updated to mitigate potential risks.

References