CVE-2026-11891

Summary

Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory.

This issue affects Valhall GPU Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0.

Affected Software

VendorProductVersion RangeStatus
Arm LtdValhall GPU Userspace Driverr46p0 <= r49p5affected
Arm LtdValhall GPU Userspace Driverr50p0 <= r54p3affected
Arm LtdValhall GPU Userspace Driverr55p0affected
Arm LtdValhall GPU Userspace Driverr56p0unaffected
Arm LtdArm 5th Gen GPU Architecture Userspace Driverr46p0 <= r49p5affected
Arm LtdArm 5th Gen GPU Architecture Userspace Driverr50p0 <= r54p3affected
Arm LtdArm 5th Gen GPU Architecture Userspace Driverr55p0affected
Arm LtdArm 5th Gen GPU Architecture Userspace Driverr56p0unaffected

Weaknesses

  • CWE-416: CWE-416 Use After Free

References