Mali GPU Kernel Driver allows improper GPU memory processing operations
Summary
| CVE | CVE-2025-6349 |
|---|---|
| State | PUBLISHED |
| Assigner | Arm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-12-01 11:15:48 UTC |
| Updated | 2026-10-18 20:10:00 UTC |
| Description | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1. |
Risk And Classification
Primary CVSS: v3.1 5.1 MEDIUM from ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS: 0.001640000 probability, percentile 0.052750000 (date 2026-10-18)
Problem Types: CWE-416 | CWE-416 CWE-416 Use After Free
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | DECLARED | 5.1 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 5.1 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
LowIntegrity
LowAvailability
NoneCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Arm | 5th Gen Gpu Architecture Kernel Driver | All | All | All | All |
| Application | Arm | Valhall Gpu Kernel Driver | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Arm Ltd | Valhall GPU Kernel Driver | affected r53p0 r54p1 patch | Not specified |
| CNA | Arm Ltd | Arm 5th Gen GPU Architecture Kernel Driver | affected r53p0 r54p1 patch | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| developer.arm.com/documentation/110697/latest | [email protected] | developer.arm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Pumpkin (@u1f383) from DEVCORE Research Team (en)
Additional Advisory Data
Solutions
CNA: This issue has been fixed in the following versions: Valhall GPU Kernel Driver r54p2, r55p0; Arm 5th Gen GPU Architecture Kernel Driver r54p2, r55p0. Arm partners are recommended to upgrade to use the latest applicable version as soon as possible.
There are currently no legacy QID mappings associated with this CVE.