Mali GPU Kernel Driver allows access to already freed memory
Summary
| CVE | CVE-2025-3212 |
|---|---|
| State | PUBLISHED |
| Assigner | Arm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-09-08 13:15:33 UTC |
| Updated | 2026-06-17 09:19:26 UTC |
| Description | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p4, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r41p0 through r49p4, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p4, from r50p0 through r54p0. |
Risk And Classification
Primary CVSS: v3.1 5.3 MEDIUM from ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS: 0.003410000 probability, percentile 0.260750000 (date 2026-10-18)
Problem Types: CWE-416 | CWE-416 CWE-416 Use After Free
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | DECLARED | 5.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 5.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
LowCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Arm | 5th Gen Gpu Architecture Kernel Driver | All | All | All | All |
| Application | Arm | 5th Gen Gpu Architecture Kernel Driver | All | All | All | All |
| Application | Arm | Bifrost Gpu Kernel Driver | All | All | All | All |
| Application | Arm | Bifrost Gpu Kernel Driver | All | All | All | All |
| Application | Arm | Valhall Gpu Kernel Driver | All | All | All | All |
| Application | Arm | Valhall Gpu Kernel Driver | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Arm Ltd | Bifrost GPU Kernel Driver | affected r41p0 r49p4 patch | Not specified |
| CNA | Arm Ltd | Bifrost GPU Kernel Driver | affected r50p0 r51p0 patch | Not specified |
| CNA | Arm Ltd | Valhall GPU Kernel Driver | affected r41p0 r49p4 patch | Not specified |
| CNA | Arm Ltd | Valhall GPU Kernel Driver | affected r50p0 r54p0 patch | Not specified |
| CNA | Arm Ltd | Arm 5th Gen GPU Architecture Kernel Driver | affected r41p0 r49p4 patch | Not specified |
| CNA | Arm Ltd | Arm 5th Gen GPU Architecture Kernel Driver | affected r50p0 r54p0 patch | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| developer.arm.com/documentation/110627/latest | [email protected] | developer.arm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
Solutions
CNA: This issue has been fixed in the following versions: Bifrost GPU Kernel Driver r54p1; Valhall GPU Kernel Driver r54p1; Arm 5th Gen GPU Architecture Kernel Driver r54p1. Arm partners are recommended to upgrade to use the latest applicable version as soon as possible.
There are currently no legacy QID mappings associated with this CVE.