Description
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory.
This issue affects Bifrost GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p3; Valhall GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arm | Bifrost GPU Userspace Driver | r42p0 – ≤ r49p5, r50p0 – ≤ r51p0, r54p1 – ≤ r54p3 | — |
| Arm | Valhall GPU Userspace Driver | r42p0 – ≤ r49p5, r50p0 – ≤ r54p3, r55p0 | r56p0 |
| Arm | Arm 5th Gen GPU Architecture Userspace Driver | r42p0 – ≤ r49p5, r50p0 – ≤ r54p3, r55p0 | r56p0 |
Advisories 1
- NCSC-2026-0467 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Nov 5, 2026