{"id":"CVE-2026-7477","title":"Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing op…","summary":"Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing op…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"Arm Ltd","product":"Bifrost GPU Kernel Driver","affected":["bifrost_gpu_kernel_driver >= r44p0 <= r49p4","bifrost_gpu_kernel_driver >= r50p0 <= r51p0","bifrost_gpu_kernel_driver >= r54p1 <= r54p2","valhall_gpu_kernel_driver >= r44p0 <= r49p5","valhall_gpu_kernel_driver >= r50p0 <= r54p3","arm_5th_gen_gpu_architecture_kernel_driver >= r44p0 <= r49p5","arm_5th_gen_gpu_architecture_kernel_driver >= r50p0 <= r54p3","arm_5th_gen_gpu_architecture_kernel_driver r55p0"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T19:17:35.373","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7477","references":[{"url":"https://support.arm.com/documentation/111552/1-0/?lang=en","label":"arm-security@arm.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T18:04:38.446600Z"},"epss":0.0011,"epssPercentile":0.01439,"ingestedAt":"2026-09-08T15:33:26.986Z","slug":"CVE-2026-7477","body":"## Overview\n\nUse After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory.\n\n\n\nThis issue affects Bifrost GPU Kernel Driver: from r44p0 through r49p4, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r44p0 through r49p5, from r50p0 through r54p3; Arm 5th Gen GPU Architecture Kernel Driver: from r44p0 through r49p5, from r50p0 through r54p3, r55p0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201905,"id":"CVE-2026-7477","ts":1789399980700,"field":"cvss","old":null,"new":"7.8"},{"seq":201904,"id":"CVE-2026-7477","ts":1789399980700,"field":"severity","old":"none","new":"high"},{"seq":200635,"id":"CVE-2026-7477","ts":1789397539777,"field":"cvss","old":"7.8","new":null},{"seq":200634,"id":"CVE-2026-7477","ts":1789397539777,"field":"severity","old":"high","new":"none"},{"seq":199349,"id":"CVE-2026-7477","ts":1789395469346,"field":"cvss","old":null,"new":"7.8"},{"seq":199348,"id":"CVE-2026-7477","ts":1789395469346,"field":"severity","old":"none","new":"high"},{"seq":198594,"id":"CVE-2026-7477","ts":1789392141889,"field":"cvss","old":"7.8","new":null},{"seq":198593,"id":"CVE-2026-7477","ts":1789392141889,"field":"severity","old":"high","new":"none"},{"seq":198549,"id":"CVE-2026-7477","ts":1789392066405,"field":"cvss","old":null,"new":"7.8"},{"seq":198548,"id":"CVE-2026-7477","ts":1789392066405,"field":"severity","old":"none","new":"high"},{"seq":196340,"id":"CVE-2026-7477","ts":1789383713839,"field":"cvss","old":"7.8","new":null},{"seq":196339,"id":"CVE-2026-7477","ts":1789383713839,"field":"severity","old":"high","new":"none"},{"seq":195269,"id":"CVE-2026-7477","ts":1789380544559,"field":"cvss","old":null,"new":"7.8"},{"seq":195268,"id":"CVE-2026-7477","ts":1789380544559,"field":"severity","old":"none","new":"high"},{"seq":194056,"id":"CVE-2026-7477","ts":1789378651135,"field":"cvss","old":"7.8","new":null},{"seq":194055,"id":"CVE-2026-7477","ts":1789378651135,"field":"severity","old":"high","new":"none"},{"seq":192843,"id":"CVE-2026-7477","ts":1789376481704,"field":"cvss","old":null,"new":"7.8"},{"seq":192842,"id":"CVE-2026-7477","ts":1789376481704,"field":"severity","old":"none","new":"high"},{"seq":191630,"id":"CVE-2026-7477","ts":1789373558787,"field":"cvss","old":"7.8","new":null},{"seq":191629,"id":"CVE-2026-7477","ts":1789373558787,"field":"severity","old":"high","new":"none"},{"seq":190415,"id":"CVE-2026-7477","ts":1789369422208,"field":"cvss","old":null,"new":"7.8"},{"seq":190414,"id":"CVE-2026-7477","ts":1789369422208,"field":"severity","old":"none","new":"high"},{"seq":189202,"id":"CVE-2026-7477","ts":1789368349534,"field":"cvss","old":"7.8","new":null},{"seq":189201,"id":"CVE-2026-7477","ts":1789368349534,"field":"severity","old":"high","new":"none"},{"seq":187985,"id":"CVE-2026-7477","ts":1789365204855,"field":"cvss","old":null,"new":"7.8"},{"seq":187984,"id":"CVE-2026-7477","ts":1789365204855,"field":"severity","old":"none","new":"high"},{"seq":186772,"id":"CVE-2026-7477","ts":1789363415649,"field":"cvss","old":"7.8","new":null},{"seq":186771,"id":"CVE-2026-7477","ts":1789363415649,"field":"severity","old":"high","new":"none"},{"seq":185558,"id":"CVE-2026-7477","ts":1789361186159,"field":"cvss","old":null,"new":"7.8"},{"seq":185557,"id":"CVE-2026-7477","ts":1789361186159,"field":"severity","old":"none","new":"high"},{"seq":184345,"id":"CVE-2026-7477","ts":1789358278529,"field":"cvss","old":"7.8","new":null},{"seq":184344,"id":"CVE-2026-7477","ts":1789358278529,"field":"severity","old":"high","new":"none"},{"seq":182596,"id":"CVE-2026-7477","ts":1789354279332,"field":"cvss","old":null,"new":"7.8"},{"seq":182595,"id":"CVE-2026-7477","ts":1789354279332,"field":"severity","old":"none","new":"high"},{"seq":181389,"id":"CVE-2026-7477","ts":1789353250325,"field":"cvss","old":"7.8","new":null},{"seq":181388,"id":"CVE-2026-7477","ts":1789353250325,"field":"severity","old":"high","new":"none"},{"seq":180182,"id":"CVE-2026-7477","ts":1789350233194,"field":"cvss","old":null,"new":"7.8"},{"seq":180181,"id":"CVE-2026-7477","ts":1789350233194,"field":"severity","old":"none","new":"high"},{"seq":178975,"id":"CVE-2026-7477","ts":1789348226492,"field":"cvss","old":"7.8","new":null},{"seq":178974,"id":"CVE-2026-7477","ts":1789348226492,"field":"severity","old":"high","new":"none"},{"seq":177768,"id":"CVE-2026-7477","ts":1789346347214,"field":"cvss","old":null,"new":"7.8"},{"seq":177767,"id":"CVE-2026-7477","ts":1789346347214,"field":"severity","old":"none","new":"high"},{"seq":176561,"id":"CVE-2026-7477","ts":1789343132780,"field":"cvss","old":"7.8","new":null},{"seq":176560,"id":"CVE-2026-7477","ts":1789343132780,"field":"severity","old":"high","new":"none"},{"seq":174678,"id":"CVE-2026-7477","ts":1789334844040,"field":"cvss","old":null,"new":"7.8"},{"seq":174677,"id":"CVE-2026-7477","ts":1789334844040,"field":"severity","old":"none","new":"high"},{"seq":173473,"id":"CVE-2026-7477","ts":1789333625766,"field":"cvss","old":"7.8","new":null},{"seq":173472,"id":"CVE-2026-7477","ts":1789333625766,"field":"severity","old":"high","new":"none"},{"seq":172287,"id":"CVE-2026-7477","ts":1789331070862,"field":"cvss","old":null,"new":"7.8"},{"seq":172286,"id":"CVE-2026-7477","ts":1789331070862,"field":"severity","old":"none","new":"high"}]}