CVE-2025-6349 — Use After Free in ARM 5TH GEN GPU Architecture Kernel Driver

CWE-416 — Use After Free4 documents4 sources
Severity
5.1MEDIUMNVD
EPSS
0.0%
top 99.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
ARM 5TH GEN GPU Architecture Kernel DriverARM Valhall GPU Kernel DriverARM LTD ARM 5TH GEN GPU Architecture Kernel Driver+3 more
Timeline
PublishedDec 1
Latest updateJan 27

Description

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 2.5 | Impact: 2.5

Affected Packages6 packages

▶NVDarm/valhall_gpu_kernel_driverr53p0 — r54p2
▶CVEListV5arm_ltd/valhall_gpu_kernel_driverr53p0 — r54p1

🔴Vulnerability Details

1
GHSA
GHSA-962p-4p89-4946: Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged us↗2025-12-01
▶

📋Vendor Advisories

2
Chrome
Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2025-6349↗2026-01-27
▶
Android
CVE-2025-6349: Mali↗2025-12-01
▶