Use After Free Vulnerability in Arm Ltd GPU Drivers
CVE-2026-12387

Currently unrated

Key Information:

Vendor: Arm
Status: Bifrost Gpu Kernel Driver; Valhall Gpu Kernel Driver; Arm 5th Gen Gpu Architecture Kernel Driver
Vendor: CVE Published:; 8 September 2026

What is CVE-2026-12387?

A use after free vulnerability exists in Arm Ltd's Bifrost and Valhall GPU Kernel Drivers and the Arm 5th Gen GPU Architecture Kernel Driver. This flaw allows a local non-privileged user process to exploit freed GPU memory resources, potentially leading to unauthorized access and malicious actions within the system. The affected driver versions range from r41p0 to r55p0 across the specified product lines, highlighting significant risks for users operating these drivers in vulnerable configurations.

Affected Version(s)

Arm 5th Gen GPU Architecture Kernel Driver r41p0

Arm 5th Gen GPU Architecture Kernel Driver r50p0

Arm 5th Gen GPU Architecture Kernel Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 8, 2026
Vulnerability Reserved
Jun 16, 2026

CVE-2026-12387 Data

JSON