Use After Free Vulnerability in Arm Ltd GPU Kernel Drivers
CVE-2026-7477

7.8HIGH

Key Information:

Vendor

Arm
Status
Bifrost Gpu Kernel Driver
Valhall Gpu Kernel Driver
Arm 5th Gen Gpu Architecture Kernel Driver
Vendor
CVE Published:
8 September 2026

What is CVE-2026-7477?

The vulnerability present in Arm Ltd's GPU kernel drivers, specifically the Bifrost and Valhall models, allows unprivileged local user processes to exploit freed memory. This Use After Free vulnerability poses potential security risks as it enables attackers to conduct valid GPU memory operations, possibly leading to unauthorized access to sensitive data or system instability.

Affected Version(s)

Arm 5th Gen GPU Architecture Kernel Driver r44p0

Arm 5th Gen GPU Architecture Kernel Driver r50p0

Arm 5th Gen GPU Architecture Kernel Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

PhysicalLab (Kihyun Jeong, Yuchan Nam, Hyungjung Joo, Hojun Lee, Yunje Shin, Han Lee, seeh0)
.