CVE-2025-6349

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1.

CVSS v3 5.1 MEDIUM

5.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://developer.arm.com/documentation/110697/latest/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver::::::::
	cpe:2.3:a:arm:valhall_gpu_kernel_driver::::::::

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) La vulnerabilidad Use After Free en el controlador de kernel de GPU Valhall de Arm Ltd, el controlador de kernel de arquitectura de GPU Arm de 5ª generación de Arm Ltd, permite que un proceso de usuario local no privilegiado realice operaciones de procesamiento de memoria de GPU inadecuadas para obtener acceso a memoria ya liberada. Este problema afecta al controlador de kernel de GPU Valhall: desde r53p0 hasta r54p1; y al controlador de kernel de arquitectura de GPU Arm de 5ª generación: desde r53p0 hasta r54p1.

Information

Published : 2025-12-01 11:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-6349

Mitre link : CVE-2025-6349

CVE.ORG link : CVE-2025-6349

JSON object : View

Products Affected

arm

valhall_gpu_kernel_driver
5th_gen_gpu_architecture_kernel_driver

CWE

CWE-416

Use After Free

{"id": "CVE-2025-6349", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-6349", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-01T18:07:59.248387Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.5}]}, "affected": [{"source": "arm-security@arm.com", "affectedData": [{"vendor": "Arm Ltd", "product": "Valhall GPU Kernel Driver", "versions": [{"status": "affected", "changes": [{"at": "r54p2", "status": "unaffected"}, {"at": "r55p0", "status": "unaffected"}], "version": "r53p0", "versionType": "patch", "lessThanOrEqual": "r54p1"}], "defaultStatus": "unaffected"}, {"vendor": "Arm Ltd", "product": "Arm 5th Gen GPU Architecture Kernel Driver", "versions": [{"status": "affected", "changes": [{"at": "r54p2", "status": "unaffected"}, {"at": "r55p0", "status": "unaffected"}], "version": "r53p0", "versionType": "patch", "lessThanOrEqual": "r54p1"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-01T11:15:48.563", "references": [{"url": "https://developer.arm.com/documentation/110697/latest/", "tags": ["Vendor Advisory"], "source": "arm-security@arm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "arm-security@arm.com", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1."}, {"lang": "es", "value": "La vulnerabilidad Use After Free en el controlador de kernel de GPU Valhall de Arm Ltd, el controlador de kernel de arquitectura de GPU Arm de 5\u00aa generaci\u00f3n de Arm Ltd, permite que un proceso de usuario local no privilegiado realice operaciones de procesamiento de memoria de GPU inadecuadas para obtener acceso a memoria ya liberada. Este problema afecta al controlador de kernel de GPU Valhall: desde r53p0 hasta r54p1; y al controlador de kernel de arquitectura de GPU Arm de 5\u00aa generaci\u00f3n: desde r53p0 hasta r54p1."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE0AA27E-761F-4C91-AA08-31D69650C0EF", "versionEndExcluding": "r54p2", "versionStartIncluding": "r53p0"}, {"criteria": "cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AF0D8A4-4D26-4AB5-987D-BE23979E74D3", "versionEndExcluding": "r54p2", "versionStartIncluding": "r53p0"}], "operator": "OR"}]}], "sourceIdentifier": "arm-security@arm.com"}