This vulnerability (CWE-416) exists in Arm Ltd's Bifrost, Valhall, and 5th Gen GPU Kernel Drivers. A local non-privileged user process can exploit a Use After Free condition by performing valid GPU memory processing operations that access memory regions that have already been freed. The affected versions include Bifrost GPU Kernel Driver from r41p0 through r49p5, r50p0 through r51p0, and r54p1 through r54p2; Valhall GPU Kernel Driver from r41p0 through r49p5, r50p0 through r54p3, and r55p0; and Arm 5th Gen GPU Architecture Kernel Driver from r41p0 through r49p5, r50p0 through r54p3, and r55p0. There is no CVSS score or vendor advisory indicating patch availability or mitigation at this time.

The vulnerability allows a local non-privileged user process to access GPU memory that has already been freed, which could lead to undefined behavior including potential information disclosure or system instability. The exact impact is not detailed in the available data. There are no known exploits in the wild reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation instructions are currently available. Until a patch is released, restricting local unprivileged access to the affected GPU drivers may reduce risk.