Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2025-0932: Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Ar

20
Routine
MEDIUM 4.3UPGRADEUPGRADEUPGRADE

CVE-2025-0932 is a medium-severity flaw (CVSS 4.3) affecting 5th gen gpu architecture userspace driver, bifrost gpu userspace driver, valhall gpu userspace driver. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to gain access to already freed memory.This issue affects Bifrost GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r

Why this priority

  • No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score4.3 (Medium)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance0.3% (top 79%)
CISA exploited listNo
WeaknessCWE-416
Published2025-08-04
Last modified2026-06-17
Publisher (CNA): Arm Limited · Vendor: arm

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

arm 5th gen gpu architecture userspace driver UPGRADE
Affected: >= r48p0 and < r49p4 · >= r50p0 and < r54p1
Fixed in: r49p4, r54p1
Safe to downgrade to: a release before r48p0
1. Check installed version
apt-cache policy 5th-gen-gpu-architecture-userspace-driver || rpm -q 5th-gen-gpu-architecture-userspace-driver || 5th-gen-gpu-architecture-userspace-driver --version
2. UPGRADE to r49p4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade 5th-gen-gpu-architecture-userspace-driver
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade 5th-gen-gpu-architecture-userspace-driver
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before r48p0 (Debian / Ubuntu)
apt-cache madison 5th-gen-gpu-architecture-userspace-driver sudo apt install 5th-gen-gpu-architecture-userspace-driver=<VERSION_BEFORE_r48p0> sudo apt-mark hold 5th-gen-gpu-architecture-userspace-driver
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list 5th-gen-gpu-architecture-userspace-driver sudo dnf downgrade 5th-gen-gpu-architecture-userspace-driver-<VERSION_BEFORE_r48p0> sudo dnf versionlock add 5th-gen-gpu-architecture-userspace-driver
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
arm bifrost gpu userspace driver UPGRADE
Affected: >= r48p0 and < r49p4 · >= r50p0 and < r54p1
Fixed in: r49p4, r54p1
Safe to downgrade to: a release before r48p0
1. Check installed version
apt-cache policy bifrost-gpu-userspace-driver || rpm -q bifrost-gpu-userspace-driver || bifrost-gpu-userspace-driver --version
2. UPGRADE to r49p4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade bifrost-gpu-userspace-driver
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade bifrost-gpu-userspace-driver
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before r48p0 (Debian / Ubuntu)
apt-cache madison bifrost-gpu-userspace-driver sudo apt install bifrost-gpu-userspace-driver=<VERSION_BEFORE_r48p0> sudo apt-mark hold bifrost-gpu-userspace-driver
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list bifrost-gpu-userspace-driver sudo dnf downgrade bifrost-gpu-userspace-driver-<VERSION_BEFORE_r48p0> sudo dnf versionlock add bifrost-gpu-userspace-driver
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
arm valhall gpu userspace driver UPGRADE
Affected: >= r48p0 and < r49p4 · >= r50p0 and < r54p1
Fixed in: r49p4, r54p1
Safe to downgrade to: a release before r48p0
1. Check installed version
apt-cache policy valhall-gpu-userspace-driver || rpm -q valhall-gpu-userspace-driver || valhall-gpu-userspace-driver --version
2. UPGRADE to r49p4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade valhall-gpu-userspace-driver
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade valhall-gpu-userspace-driver
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before r48p0 (Debian / Ubuntu)
apt-cache madison valhall-gpu-userspace-driver sudo apt install valhall-gpu-userspace-driver=<VERSION_BEFORE_r48p0> sudo apt-mark hold valhall-gpu-userspace-driver
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list valhall-gpu-userspace-driver sudo dnf downgrade valhall-gpu-userspace-driver-<VERSION_BEFORE_r48p0> sudo dnf versionlock add valhall-gpu-userspace-driver
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-0932?

5th gen gpu architecture userspace driver: upgrade to r49p4, r54p1; bifrost gpu userspace driver: upgrade to r49p4, r54p1; valhall gpu userspace driver: upgrade to r49p4, r54p1. Exact commands for each OS are on this page.

Is CVE-2025-0932 being exploited?

CVE-2025-0932 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-0932 affect?

CVE-2025-0932 affects 5th gen gpu architecture userspace driver, bifrost gpu userspace driver, valhall gpu userspace driver. Severity is medium (CVSS 4.3). Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operation

How urgent is CVE-2025-0932?

Priority 20/100. No elevated risk signals yet.

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.