PT-2025-23494 · Arm · Arm Bifrost Gpu Kernel Driver+2

Published 2025-06-02 · Updated 2025-06-07 · CVE-2025-0819

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arm Ltd Bifrost GPU Kernel Driver versions r44p0 through r51p0 Arm Ltd Valhall GPU Kernel Driver versions r44p0 through r54p0 Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r44p0 through r54p0

Description The issue is a Use After Free vulnerability that allows a local non-privileged user process to perform valid GPU memory processing operations to gain access to already freed memory.

Recommendations For Arm Ltd Bifrost GPU Kernel Driver versions r44p0 through r51p0, update to a version later than r51p0. For Arm Ltd Valhall GPU Kernel Driver versions r44p0 through r54p0, update to a version later than r54p0. For Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r44p0 through r54p0, update to a version later than r54p0.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-402115802

CVE-2025-0819

Affected Products

Arm 5Th Gen Gpu Architecture Kernel Driver

Arm Bifrost Gpu Kernel Driver

Arm Valhall Gpu Kernel Driver

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-0819 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0819 · Vendor Advisory
• https://developer.arm.com/documentation/110466/latest · Vendor Advisory
• https://t.me/cvenotify/124343 · Telegram Post
• https://t.me/cvenotify/124326 · Telegram Post
• https://t.me/cvetracker/25156 · Telegram Post
• https://t.me/latest_high_impact_cve/2518 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1929517253436866718 · Twitter Post
• https://twitter.com/cracbot/status/1931305189736132684 · Twitter Post
• https://twitter.com/CVEnew/status/1929500870762430846 · Twitter Post