Information Exposure Vulnerability in Arm Ltd Valhall GPU Kernel Driver
CVE-2026-0860

7.5HIGH

Key Information:

Vendor

Arm
Status
Valhall Gpu Kernel Driver
Arm 5th Gen Gpu Architecture Kernel Driver
Vendor
CVE Published:
8 September 2026

What is CVE-2026-0860?

An information exposure vulnerability in the Valhall GPU Kernel Driver from Arm Ltd enables a local non-privileged user process to conduct unauthorized GPU memory operations. This could lead to access to sensitive kernel data, posing significant security risks. The affected versions include r29p0 through r49p5, r50p0 through r54p3, and r55p0 for both the Valhall GPU Kernel Driver and the Arm 5th Gen GPU Architecture Kernel Driver.

Affected Version(s)

Arm 5th Gen GPU Architecture Kernel Driver r41p0

Arm 5th Gen GPU Architecture Kernel Driver r50p0

Arm 5th Gen GPU Architecture Kernel Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.