This issue affects Bifrost GPU Kernel Driver: from r12p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r19p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Arm Ltd | Bifrost GPU Kernel Driver | unaffected |
|
|||||||||||||||
| Arm Ltd | Valhall GPU Kernel Driver | unaffected |
|
|||||||||||||||
| Arm Ltd | Arm 5th Gen GPU Architecture Kernel Driver | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
This issue has been fixed in the following versions: Valhall GPU Kernel Driver: r56p0; Arm 5th Gen GPU Architecture Kernel Driver: r56p0. Arm partners are recommended to upgrade to the latest applicable version as soon as possible.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://support.arm.com/documentation/111552/1-0/?lang=en |
|
Tue, 08 Sep 2026 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to cause a denial of service or disclose sensitive information. This issue affects Bifrost GPU Kernel Driver: from r12p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r19p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0. | |
| Title | Mali GPU Kernel Driver allows denial of service or disclosure of sensitive information | |
| Weaknesses | CWE-362 | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: Arm
Published:
Updated: 2026-09-08T14:21:22.296Z
Reserved: 2026-05-19T17:09:31.535Z
Link: CVE-2026-9040
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-09-08T15:18:56.467
Modified: 2026-09-08T15:24:07.790
Link: CVE-2026-9040
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')