Mali GPU Kernel Driver allows improper GPU processing operations

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• arm 5th gen gpu architecture kernel driverr41p0 and later · before r49p5
• arm 5th gen gpu architecture kernel driverr50p0 and later · before r54p1
• arm valhall gpu kernel driverr29p0 and later · before r49p5
• arm valhall gpu kernel driverr50p0 and later · before r54p1

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Arm). Independent of NVD's CPE analysis and usually ahead of it.

• Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver

  • r41p0 and later · up to and including r49p4affected · patchfixed in r49p5
  • r50p0 and later · up to and including r54p0affected · patchfixed in r54p1, r55p0

• Arm Ltd Valhall GPU Kernel Driver

  • r29p0 and later · up to and including r49p4affected · patchfixed in r49p5
  • r50p0 and later · up to and including r54p0affected · patchfixed in r54p1, r55p0

Other highest-scoring records for the same primary product.

• CVE-2023-4211Mali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsKEV
  52Plan
• CVE-2023-26083Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver aKEV
  43Plan
• CVE-2023-6143Mali GPU Kernel Driver allows improper GPU memory processing operations
  33Monitor

Published before and after this one in the same product

• ← EarlierCVE-2025-0819Jun 2, 2025 · Mali GPU Kernel Driver allows access to already freed memory
  31Monitor
• ← EarlierCVE-2025-3212Sep 8, 2025 · Mali GPU Kernel Driver allows access to already freed memory
  21Monitor
• Later →CVE-2025-6349Dec 1, 2025 · Mali GPU Kernel Driver allows improper GPU memory processing operations
  20Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

The extension requests broader permissions than its function needs and sends the data it collects out for purposes beyond its stated function.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1{2  "permissions": ["tabs", "<all_urls>"],3  "background": { "service_worker": "analytics.js" }4}

1{2  "permissions": ["activeTab"],3  "host_permissions": ["https://yildiz.example/*"]4}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.