Race Condition Vulnerability in Arm GPU Kernel Drivers
CVE-2026-9040

7.7HIGH

Key Information:

Vendor

Arm
Status
Bifrost Gpu Kernel Driver
Valhall Gpu Kernel Driver
Arm 5th Gen Gpu Architecture Kernel Driver
Vendor
CVE Published:
8 September 2026

What is CVE-2026-9040?

A race condition vulnerability exists within the Arm Ltd GPU Kernel Drivers, including the Bifrost and Valhall architectures, allowing local non-privileged users to manipulate GPU memory operations. This can result in a denial of service or potentially expose sensitive information, highlighting the need for prompt attention and remediation to protect system integrity and user data.

Affected Version(s)

Arm 5th Gen GPU Architecture Kernel Driver r41p0

Arm 5th Gen GPU Architecture Kernel Driver r50p0

Arm 5th Gen GPU Architecture Kernel Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pumpkin from DEVCORE Research Team
.