Use After Free Vulnerability in Arm Ltd GPU Drivers
CVE-2026-0001

4.4MEDIUM

Key Information:

Vendor

Arm
Status
Bifrost Gpu Kernel Driver
Valhall Gpu Kernel Driver
Arm 5th Gen Gpu Architecture Kernel Driver
Vendor
CVE Published:
8 September 2026

What is CVE-2026-0001?

A Use After Free vulnerability exists in the Arm Ltd Bifrost, Valhall, and 5th Gen GPU Kernel Drivers, allowing a local non-privileged user process to access freed GPU memory. This can lead to potential memory corruption or data leakage, presenting significant security risks. This issue impacts specific driver versions, compromising the integrity of memory management operations within the affected products.

Affected Version(s)

Arm 5th Gen GPU Architecture Kernel Driver r41p0

Arm 5th Gen GPU Architecture Kernel Driver r50p0

Arm 5th Gen GPU Architecture Kernel Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

PhysicalLab (Kihyun Jeong, Yuchan Nam, Hyungjung Joo, Hojun Lee, Yunje Shin, Han Lee, seeh0)
.