Race Condition Vulnerability in Arm GPU Kernel Drivers
CVE-2026-9040

Currently unrated

Key Information:

Vendor: Arm
Status: Bifrost Gpu Kernel Driver; Valhall Gpu Kernel Driver; Arm 5th Gen Gpu Architecture Kernel Driver
Vendor: CVE Published:; 8 September 2026

What is CVE-2026-9040?

A race condition vulnerability exists within the Arm Ltd GPU Kernel Drivers, including the Bifrost and Valhall architectures, allowing local non-privileged users to manipulate GPU memory operations. This can result in a denial of service or potentially expose sensitive information, highlighting the need for prompt attention and remediation to protect system integrity and user data.

Affected Version(s)

Arm 5th Gen GPU Architecture Kernel Driver r41p0

Arm 5th Gen GPU Architecture Kernel Driver r50p0

Arm 5th Gen GPU Architecture Kernel Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 8, 2026
Vulnerability Reserved
May 19, 2026

Credit

Pumpkin from DEVCORE Research Team

CVE-2026-9040 Data

JSON