Use After Free Vulnerability in Arm Ltd Bifrost and Valhall GPU Kernel Drivers
CVE-2025-3212
5.3MEDIUM
Key Information:
- Vendor
Arm
- Vendor
- CVE Published:
- 8 September 2025
What is CVE-2025-3212?
This vulnerability allows a local non-privileged user process to exploit a use after free condition within the Bifrost and Valhall GPU kernel drivers. It enables attackers to perform valid memory processing operations on GPU resources that have already been freed. As a result, unauthorized access to sensitive memory regions can occur, posing significant risks for system integrity and data safety.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Arm 5th Gen GPU Architecture Kernel Driver r41p0
Arm 5th Gen GPU Architecture Kernel Driver r50p0
Bifrost GPU Kernel Driver r41p0
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved