Executive brief
Arm's Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver are used to manage GPU compute resources in embedded and mobile systems. A local user without administrative privileges can exploit improper GPU memory handling to read sensitive kernel information, potentially exposing cryptographic keys, memory addresses, or other security-critical data that could enable further system compromise.
Technical details
This is an information disclosure vulnerability in Arm GPU kernel drivers caused by improper GPU memory processing. A local non-privileged user can perform unauthorized GPU memory operations to access kernel memory contents. The attack requires local access and does not require elevated privileges. Successful exploitation allows reading sensitive kernel information, which could be leveraged for privilege escalation or other follow-on attacks. Patches are available in driver versions after r54p3 for Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver.
Affected products
- Arm Valhall GPU Kernel Driver r29p0 through r49p5, r50p0 through r54p3, r55p0
- Arm Arm 5th Gen GPU Architecture Kernel Driver r41p0 through r49p5, r50p0 through r54p3, r55p0
Timeline
- 2026-09-08: disclosed