{"id":"CVE-2026-5729","title":"Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory.\n\n…","summary":"Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory.\n\n…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"Arm Ltd","product":"Valhall GPU Kernel Driver","affected":["valhall_gpu_kernel_driver >= r50p0 <= r54p3","valhall_gpu_kernel_driver r55p0","arm_5th_gen_gpu_architecture_kernel_driver >= r50p0 <= r54p3","arm_5th_gen_gpu_architecture_kernel_driver r55p0"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T19:17:31.133","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-5729","references":[{"url":"https://support.arm.com/documentation/111552/1-0/?lang=en","label":"arm-security@arm.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T18:05:32.298812Z"},"epss":0.0011,"epssPercentile":0.01439,"ingestedAt":"2026-09-08T15:33:26.985Z","slug":"CVE-2026-5729","body":"## Overview\n\nUse After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory.\n\n\n\nThis issue affects Valhall GPU Kernel Driver: from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r50p0 through r54p3, r55p0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201822,"id":"CVE-2026-5729","ts":1789399726826,"field":"cvss","old":null,"new":"7.8"},{"seq":201821,"id":"CVE-2026-5729","ts":1789399726826,"field":"severity","old":"none","new":"high"},{"seq":200552,"id":"CVE-2026-5729","ts":1789397383209,"field":"cvss","old":"7.8","new":null},{"seq":200551,"id":"CVE-2026-5729","ts":1789397383209,"field":"severity","old":"high","new":"none"},{"seq":198469,"id":"CVE-2026-5729","ts":1789391969341,"field":"cvss","old":null,"new":"7.8"},{"seq":198468,"id":"CVE-2026-5729","ts":1789391969341,"field":"severity","old":"none","new":"high"},{"seq":196262,"id":"CVE-2026-5729","ts":1789383586509,"field":"cvss","old":"7.8","new":null},{"seq":196261,"id":"CVE-2026-5729","ts":1789383586509,"field":"severity","old":"high","new":"none"},{"seq":195191,"id":"CVE-2026-5729","ts":1789380475591,"field":"cvss","old":null,"new":"7.8"},{"seq":195190,"id":"CVE-2026-5729","ts":1789380475591,"field":"severity","old":"none","new":"high"},{"seq":193978,"id":"CVE-2026-5729","ts":1789378526318,"field":"cvss","old":"7.8","new":null},{"seq":193977,"id":"CVE-2026-5729","ts":1789378526318,"field":"severity","old":"high","new":"none"},{"seq":192765,"id":"CVE-2026-5729","ts":1789376407814,"field":"cvss","old":null,"new":"7.8"},{"seq":192764,"id":"CVE-2026-5729","ts":1789376407814,"field":"severity","old":"none","new":"high"},{"seq":191552,"id":"CVE-2026-5729","ts":1789373428157,"field":"cvss","old":"7.8","new":null},{"seq":191551,"id":"CVE-2026-5729","ts":1789373428157,"field":"severity","old":"high","new":"none"},{"seq":190337,"id":"CVE-2026-5729","ts":1789369300822,"field":"cvss","old":null,"new":"7.8"},{"seq":190336,"id":"CVE-2026-5729","ts":1789369300822,"field":"severity","old":"none","new":"high"},{"seq":189124,"id":"CVE-2026-5729","ts":1789368268121,"field":"cvss","old":"7.8","new":null},{"seq":189123,"id":"CVE-2026-5729","ts":1789368268121,"field":"severity","old":"high","new":"none"},{"seq":187907,"id":"CVE-2026-5729","ts":1789365143908,"field":"cvss","old":null,"new":"7.8"},{"seq":187906,"id":"CVE-2026-5729","ts":1789365143908,"field":"severity","old":"none","new":"high"},{"seq":186694,"id":"CVE-2026-5729","ts":1789363279644,"field":"cvss","old":"7.8","new":null},{"seq":186693,"id":"CVE-2026-5729","ts":1789363279644,"field":"severity","old":"high","new":"none"},{"seq":185480,"id":"CVE-2026-5729","ts":1789361101965,"field":"cvss","old":null,"new":"7.8"},{"seq":185479,"id":"CVE-2026-5729","ts":1789361101965,"field":"severity","old":"none","new":"high"},{"seq":184267,"id":"CVE-2026-5729","ts":1789358156773,"field":"cvss","old":"7.8","new":null},{"seq":184266,"id":"CVE-2026-5729","ts":1789358156773,"field":"severity","old":"high","new":"none"},{"seq":182518,"id":"CVE-2026-5729","ts":1789354223023,"field":"cvss","old":null,"new":"7.8"},{"seq":182517,"id":"CVE-2026-5729","ts":1789354223023,"field":"severity","old":"none","new":"high"},{"seq":181311,"id":"CVE-2026-5729","ts":1789353127328,"field":"cvss","old":"7.8","new":null},{"seq":181310,"id":"CVE-2026-5729","ts":1789353127328,"field":"severity","old":"high","new":"none"},{"seq":180104,"id":"CVE-2026-5729","ts":1789350169670,"field":"cvss","old":null,"new":"7.8"},{"seq":180103,"id":"CVE-2026-5729","ts":1789350169670,"field":"severity","old":"none","new":"high"},{"seq":178897,"id":"CVE-2026-5729","ts":1789348102583,"field":"cvss","old":"7.8","new":null},{"seq":178896,"id":"CVE-2026-5729","ts":1789348102583,"field":"severity","old":"high","new":"none"},{"seq":177690,"id":"CVE-2026-5729","ts":1789346278165,"field":"cvss","old":null,"new":"7.8"},{"seq":177689,"id":"CVE-2026-5729","ts":1789346278165,"field":"severity","old":"none","new":"high"},{"seq":176483,"id":"CVE-2026-5729","ts":1789343019614,"field":"cvss","old":"7.8","new":null},{"seq":176482,"id":"CVE-2026-5729","ts":1789343019614,"field":"severity","old":"high","new":"none"},{"seq":174600,"id":"CVE-2026-5729","ts":1789334772149,"field":"cvss","old":null,"new":"7.8"},{"seq":174599,"id":"CVE-2026-5729","ts":1789334772149,"field":"severity","old":"none","new":"high"},{"seq":173395,"id":"CVE-2026-5729","ts":1789333515808,"field":"cvss","old":"7.8","new":null},{"seq":173394,"id":"CVE-2026-5729","ts":1789333515808,"field":"severity","old":"high","new":"none"},{"seq":172209,"id":"CVE-2026-5729","ts":1789331018622,"field":"cvss","old":null,"new":"7.8"},{"seq":172208,"id":"CVE-2026-5729","ts":1789331018622,"field":"severity","old":"none","new":"high"},{"seq":171023,"id":"CVE-2026-5729","ts":1789328621211,"field":"cvss","old":"7.8","new":null},{"seq":171022,"id":"CVE-2026-5729","ts":1789328621211,"field":"severity","old":"high","new":"none"},{"seq":169818,"id":"CVE-2026-5729","ts":1789327051542,"field":"cvss","old":null,"new":"7.8"},{"seq":169817,"id":"CVE-2026-5729","ts":1789327051542,"field":"severity","old":"none","new":"high"}]}