CVE-2025-0427

HIGH

Arm Ltd Bifrost/Valhall/5th Gen GPU - Use After Free

Title source: llm
STIX 2.1

Description

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r8p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r19p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0.

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0008
EPSS Percentile 23.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-416
Status published
Products (3)
arm/5th_gen_gpu_architecture_kernel_driver r41p0 - r49p3
arm/bifrost_gpu_kernel_driver r8p0 - r49p3
arm/valhall_gpu_kernel_driver r19p0 - r49p3
Published May 02, 2025
Tracked Since Feb 18, 2026