This vulnerability involves a Use After Free condition (CWE-416) in Arm Ltd's GPU kernel drivers for Bifrost, Valhall, and 5th Gen GPU architectures. A local non-privileged user process can exploit improper GPU memory processing to access memory that has already been freed, potentially leading to undefined behavior or security issues. The affected versions include Bifrost GPU Kernel Driver from r49p3 through r49p5, r51p0, and from r54p1 through r54p2; Valhall GPU Kernel Driver from r49p3 through r49p5, from r51p0 through r54p3, and r55p0; and Arm 5th Gen GPU Architecture Kernel Driver from r49p3 through r49p5, from r51p0 through r54p3, and r55p0. There is no available CVSS score or vendor advisory detailing patch availability or mitigation steps.

A local non-privileged user process can exploit this vulnerability to access GPU memory that has already been freed. This could potentially lead to memory corruption, information disclosure, or system instability depending on how the freed memory is used. However, no specific impact details or exploitation in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limiting local unprivileged access to affected systems may reduce risk.