PT-2025-48435 · Arm · Valhall Gpu Kernel Driver+1

Published 2025-12-01 · Updated 2026-01-10 · CVE-2025-2879

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Arm Ltd Valhall GPU Kernel Driver versions r29p0 through r49p4, and r50p0 through r54p0 Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r41p0 through r49p4, and r50p0 through r54p0

Description A flaw exists in the Arm Ltd Valhall GPU Kernel Driver and Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver that could allow a local, non-privileged user process to perform improper GPU processing operations, potentially exposing sensitive data. The issue stems from improper handling of GPU operations.

Recommendations Update Valhall GPU Kernel Driver to a version later than r49p4 or r54p0. Update Arm 5th Gen GPU Architecture Kernel Driver to a version later than r49p4 or r54p0.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ASB-A-427973176

CVE-2025-2879

Affected Products

Arm 5Th Gen Gpu Architecture Kernel Driver

Valhall Gpu Kernel Driver

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-2879 · Security Note
• https://developer.arm.com/documentation/110697/latest · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-2879 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1995466253641630073 · Twitter Post
• https://t.me/CVEtracker/38530 · Telegram Post
• https://twitter.com/CVEnew/status/1995451759289073880 · Twitter Post
• https://twitter.com/ksg93rd/status/2009861872573362253 · Twitter Post