What’s Vulnerable › Vulnerabilities
CVE-2025-0015: Mali GPU Kernel Driver allows improper GPU processing operations
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-02-03 · updated 2026-06-17
- Weakness: CWE-416
Description
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to make improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r48p0 through r49p1, from r50p0 through r52p0; Arm 5th Gen GPU Architecture Kernel Driver: from r48p0 through r49p1, from r50p0 through r52p0.
Affected products
- Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver: from r48p0 before r49p2; from r50p0 before r53p0 — fixed in r49p2, r53p0
- Arm Ltd Valhall GPU Kernel Driver: from r48p0 before r49p2; from r50p0 before r53p0 — fixed in r49p2, r53p0
How to fix
Upgrade to a fixed version: Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver r49p2, r53p0; Arm Ltd Valhall GPU Kernel Driver r49p2, r53p0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-0015 or the next vulnerability affects your stack