CVE-2026-5729: Mali GPU Kernel Driver allows access to already freed memory
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory.
This issue affects Valhall GPU Kernel Driver: from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r50p0 through r54p3, r55p0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Valhall GPU Kernel Driverto a version that resolves this vulnerability.Fixed in r56p0 - Upgrade
Upgrade
Arm 5th Gen GPU Architecture Kernel Driverto a version that resolves this vulnerability.Fixed in r56p0
Event History
Frequently Asked Questions
Which systems should be prioritized for assessment?
Systems running the Valhall GPU Kernel Driver or Arm 5th Gen GPU Architecture Kernel Driver in the affected releases should be assessed, particularly where local non-privileged users can run GPU workloads.
What level of access does an attacker need?
An attacker needs local access as a non-privileged user process. The issue can be triggered through valid GPU processing operations; elevated privileges are not stated as a requirement.
How can I determine whether an installed driver is affected?
Check the driver family and release. The affected ranges are r50p0 through r54p3 and r55p0 for both the Valhall GPU Kernel Driver and the Arm 5th Gen GPU Architecture Kernel Driver.