CVE-2025-6349

published 2025-12-01

CVE-2025-6349: Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user…

Priority P4 25 medium 5.1 CVSS 3.1

AV L AC L PR N UI N S U C L I L A N

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
arm	5th_gen_gpu_architecture_kernel_driver	>= r53p0 < r54p2	r54p2
arm	valhall_gpu_kernel_driver	>= r53p0 < r54p2	r54p2
arm_ltd	arm_5th_gen_gpu_architecture_kernel_driver	r53p0 – r54p1	—
arm_ltd	valhall_gpu_kernel_driver	r53p0 – r54p1	—
google	android	—	—
google	chrome_chrome	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-416