A high-severity Use After Free vulnerability in Arm GPU kernel drivers permits local privilege escalation by allowing non-privileged users to access freed memory.

This is a Use After Free vulnerability (CWE-416) triggered when a local, non-privileged user initiates specific GPU memory operations. The flaw allows the attacker to interact with memory that has already been deallocated, potentially leading to unauthorized data access or code execution.

The CVSS score of 7.8 reflects a high risk for systems relying on these drivers, as it enables local privilege escalation. Successful exploitation could allow a malicious actor with limited access to compromise the integrity and confidentiality of the host operating system, leading to full system control or data exfiltration.

Immediate Action: Update Valhall and 5th Gen GPU Kernel Drivers to version r56p0 or later. For affected Bifrost drivers, contact your hardware vendor to obtain the latest updated driver package.

Proactive Monitoring: Review system logs for unusual kernel crashes or attempts by low-privileged processes to execute unauthorized GPU memory management operations.

Compensating Controls: Implement strict kernel-level access controls and restrict user access to GPU interfaces where possible to minimize the attack surface for local users.

Public Exploit Available: No

Organizations utilizing affected Arm GPU drivers must prioritize the deployment of the r56p0 update where available. For systems running affected Bifrost versions, maintain close communication with hardware vendors to ensure patches are applied as soon as they are released to prevent potential local privilege escalation.