CVE-2025-0073

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-0073
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 before r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 before r54p0.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://developer.arm.com/documentation/110466/latest/ Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:r53p0:*:*:*:*:*:*:*
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r53p0:*:*:*:*:*:*:*
History

02 Jul 2025, 21:18

Type Values Removed Values Added
First Time Arm valhall Gpu Kernel Driver
Arm 5th Gen Gpu Architecture Kernel Driver
Arm
Summary
  • (es) Vulnerabilidad de Use After Free en Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver permite que un proceso de usuario local sin privilegios realice operaciones de procesamiento de memoria de GPU incorrectas para obtener acceso a memoria ya liberada. Este problema afecta al controlador del kernel de GPU Valhall: desde r53p0 antes de r54p0; controlador del kernel de la arquitectura de GPU Arm 5.ª generación: desde r53p0 antes de r54p0.
CPE cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:r53p0:*:*:*:*:*:*:*
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r53p0:*:*:*:*:*:*:*
References () https://developer.arm.com/documentation/110466/latest/ - () https://developer.arm.com/documentation/110466/latest/ - Vendor Advisory

02 Jun 2025, 15:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

02 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-02 11:15

Updated : 2025-07-02 21:18

NVD link : CVE-2025-0073

Mitre link : CVE-2025-0073

CVE.ORG link : CVE-2025-0073

JSON object : View

Products Affected

arm

  • 5th_gen_gpu_architecture_kernel_driver
  • valhall_gpu_kernel_driver
CWE
CWE-416

Use After Free