CVE-2025-6349 Details
Description
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1.
A use-after-free vulnerability has been identified in the Arm Mali Valhall GPU Kernel Driver and the Arm 5th Gen GPU Architecture Kernel Driver, both allowing local non-privileged user processes to access already freed memory. This vulnerability arises from improper GPU memory processing operations, potentially leading to exploitation by accessing sensitive data or causing memory corruption. The issue affects Valhall GPU Kernel Driver versions r53p0 prior to r54p1 and Arm 5th Gen GPU Architecture Kernel Driver versions r53p0 prior to r54p1.
Users are advised to upgrade to Arm Mali Valhall GPU Kernel Driver r54p2 or r55p0, or to Arm 5th Gen GPU Architecture Kernel Driver r54p2 or r55p0.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Dec 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://developer.arm.com/documentation/110697/latest/ | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| arm 5th gen gpu architecture kernel driver | >= r53p0, < r54p2 |
CPE
Remediation
| |
| arm valhall gpu kernel driver | >= r53p0, < r54p2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 2, 2025 | Initial Analysis | [email protected] |
| Dec 1, 2025 | CVE Modified | CISA-ADP |
| Dec 1, 2025 | New CVE Received | [email protected] |