CVE-2025-0427: Mali GPU Kernel Driver allows access to already freed memory
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r8p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r19p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0427?
CVE-2025-0427 has been rated as a high-severity vulnerability allowing potential exploitation of freed memory in GPU drivers.
How do I fix CVE-2025-0427?
To mitigate CVE-2025-0427, users should update to the latest versions of the affected GPU kernel drivers provided by Arm Ltd.
What software is affected by CVE-2025-0427?
CVE-2025-0427 affects multiple GPU drivers including Arm Ltd Bifrost, Valhall, and Arm 5th Gen GPU Kernel Drivers.
Can CVE-2025-0427 be exploited by remote attackers?
No, CVE-2025-0427 can only be exploited by local non-privileged user processes.
What types of attacks could CVE-2025-0427 enable?
CVE-2025-0427 could enable attackers to perform unauthorized actions by accessing already freed memory, leading to possible data corruption or privilege escalation.