A race condition vulnerability in multiple Arm GPU kernel drivers permits local, non-privileged users to trigger memory corruption, leading to system instability or unauthorized data disclosure.

This flaw is a race condition (CWE-362) resulting from improper synchronization during GPU memory processing. A local, non-privileged attacker can exploit this condition to achieve unauthorized memory access or service disruption.

The vulnerability carries a CVSS score of 7.7, reflecting a high-severity risk despite the local access requirement. Successful exploitation could allow an attacker to bypass security boundaries, potentially leaking sensitive kernel memory or forcing system crashes that result in significant downtime for affected devices.

Immediate Action: Upgrade Valhall and 5th Gen GPU drivers to version r56p0 or later. For Bifrost driver users, please consult the vendor advisory for specific guidance as a definitive patch version was not provided in the current records.

Proactive Monitoring: Monitor system logs for recurring GPU driver crashes or unusual memory access patterns that may indicate an exploitation attempt.

Compensating Controls: Limit access to the device to only trusted users, as the attack requires local execution capabilities on the host system.

Public Exploit Available: No — exploit_available is false.

Organizations should prioritize updating their GPU kernel drivers to the provided fixed versions to eliminate the race condition risk. Given the potential for sensitive information disclosure, administrators should treat this update as a standard security maintenance requirement for all affected hardware platforms.