This issue affects Bifrost GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p3; Valhall GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Arm Ltd | Bifrost GPU Userspace Driver | unaffected |
|
|||||||||||||||
| Arm Ltd | Valhall GPU Userspace Driver | unaffected |
|
|||||||||||||||
| Arm Ltd | Arm 5th Gen GPU Architecture Userspace Driver | unaffected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
This issue has been fixed in the following versions: Valhall GPU Userspace Driver: r56p0; Arm 5th Gen GPU Architecture Userspace Driver: r56p0. Arm partners are recommended to upgrade to the latest applicable version as soon as possible.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://support.arm.com/documentation/111552/1-0/?lang=en |
|
Tue, 08 Sep 2026 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Bifrost GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p3; Valhall GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0. | |
| Title | Mali GPU Userspace Driver allows access to already freed memory | |
| Weaknesses | CWE-416 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Arm
Published:
Updated: 2026-09-08T14:20:53.547Z
Reserved: 2026-05-19T16:30:46.525Z
Link: CVE-2026-9034
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.