AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ArmCVE-2026-11891

Arm 5th Gen GPU Architecture Userspace Driver: use after free

Arm

CVE-2026-11891 · Published Sep 8, 2026 · updated Sep 10, 2026

Medium5.1
No fix yet
Arm advisory

Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory.

This issue affects Valhall GPU Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0.

Affected versions

PackageAffectedFixed in
Arm 5th Gen GPU Architecture Userspace Driver
Product
>= r46p0, <= r49p5No fix yet
>= r50p0, <= r54p3No fix yet
<= r55p0No fix yet
Valhall GPU Userspace Driver
Product
>= r46p0, <= r49p5No fix yet
>= r50p0, <= r54p3No fix yet
<= r55p0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-416

More Arm advisories

All Arm
High 7.8Sep 8Arm 5th Gen GPU Architecture Userspace Driver: use after freeCVE-2026-9034no fix yetHigh 7.7Sep 8Arm 5th Gen GPU Architecture Kernel Driver: race conditionCVE-2026-9040no fix yetHigh 7.8Sep 8Arm 5th Gen GPU Architecture Kernel Driver: use after freeCVE-2026-7476no fix yetHigh 7.8Sep 8Arm 5th Gen GPU Architecture Kernel Driver: use after freeCVE-2026-7477no fix yetHigh 7.8Sep 8Arm 5th Gen GPU Architecture Kernel Driver: use after freeCVE-2026-5729no fix yetMedium 4.0Sep 8Arm 5th Gen GPU Architecture Kernel Driver: use after freeCVE-2026-12285no fix yet