CVE-2025-8045

Published Dec 1, 2025

Last updated 10 months ago

Valhall GPU Kernel Driver

Arm 5th Gen GPU Architecture Kernel Driver

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-8045 is a "Use After Free" vulnerability affecting the Arm Ltd Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver. This flaw allows a local non-privileged user process to execute improper GPU processing operations, thereby gaining access to memory that has already been freed. The vulnerability impacts driver versions r53p0 through r54p1 for both the Valhall GPU Kernel Driver and the Arm 5th Gen GPU Architecture Kernel Driver. Successful exploitation of this issue can result in the disclosure of kernel memory contents to an unprivileged process running on the device, requiring local access and no user interaction.

Description: Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1.
Source: arm-security@arm.com
NVD status: Analyzed
Products: 5th_gen_gpu_architecture_kernel_driver, valhall_gpu_kernel_driver

Risk scores

CVSS 3.1

Type: Secondary
Base score: 4
Impact score: 1.4
Exploitability score: 2.5
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity: MEDIUM

Weaknesses

arm-security@arm.com: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "AE0AA27E-761F-4C91-AA08-31D69650C0EF",
            "versionEndExcluding": "r54p2",
            "versionStartIncluding": "r53p0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "6AF0D8A4-4D26-4AB5-987D-BE23979E74D3",
            "versionEndExcluding": "r54p2",
            "versionStartIncluding": "r53p0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.