{"id":"CVE-2026-9040","title":"A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processi…","summary":"A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processi…","severity":"high","cvss":7.7,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-362"],"vendor":"Arm Ltd","product":"Bifrost GPU Kernel Driver","affected":["bifrost_gpu_kernel_driver >= r12p0 <= r49p5","bifrost_gpu_kernel_driver >= r50p0 <= r51p0","bifrost_gpu_kernel_driver >= r54p1 <= r54p2","valhall_gpu_kernel_driver >= r19p0 <= r49p5","valhall_gpu_kernel_driver >= r50p0 <= r54p3","valhall_gpu_kernel_driver r55p0","arm_5th_gen_gpu_architecture_kernel_driver >= r41p0 <= r49p5","arm_5th_gen_gpu_architecture_kernel_driver >= r50p0 <= r54p3","arm_5th_gen_gpu_architecture_kernel_driver r55p0"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T18:18:16.697","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-9040","references":[{"url":"https://support.arm.com/documentation/111552/1-0/?lang=en","label":"arm-security@arm.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T17:55:31.134691Z"},"epss":0.00096,"epssPercentile":0.00777,"ingestedAt":"2026-09-08T15:33:26.986Z","slug":"CVE-2026-9040","body":"## Overview\n\nA race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to cause a denial of service or disclose sensitive information.\n\n\n\nThis issue affects Bifrost GPU Kernel Driver: from r12p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r19p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":42.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202633,"id":"CVE-2026-9040","ts":1789400094393,"field":"cvss","old":null,"new":"7.7"},{"seq":202632,"id":"CVE-2026-9040","ts":1789400094393,"field":"severity","old":"none","new":"high"},{"seq":201360,"id":"CVE-2026-9040","ts":1789397621146,"field":"cvss","old":"7.7","new":null},{"seq":201359,"id":"CVE-2026-9040","ts":1789397621146,"field":"severity","old":"high","new":"none"},{"seq":200053,"id":"CVE-2026-9040","ts":1789395586316,"field":"cvss","old":null,"new":"7.7"},{"seq":200052,"id":"CVE-2026-9040","ts":1789395586316,"field":"severity","old":"none","new":"high"},{"seq":199290,"id":"CVE-2026-9040","ts":1789392261176,"field":"cvss","old":"7.7","new":null},{"seq":199289,"id":"CVE-2026-9040","ts":1789392261176,"field":"severity","old":"high","new":"none"},{"seq":197623,"id":"CVE-2026-9040","ts":1789384302750,"field":"cvss","old":null,"new":"7.7"},{"seq":197622,"id":"CVE-2026-9040","ts":1789384302750,"field":"severity","old":"none","new":"high"},{"seq":196897,"id":"CVE-2026-9040","ts":1789383784024,"field":"cvss","old":"7.7","new":null},{"seq":196896,"id":"CVE-2026-9040","ts":1789383784024,"field":"severity","old":"high","new":"none"},{"seq":195801,"id":"CVE-2026-9040","ts":1789380593587,"field":"cvss","old":null,"new":"7.7"},{"seq":195800,"id":"CVE-2026-9040","ts":1789380593587,"field":"severity","old":"none","new":"high"},{"seq":194752,"id":"CVE-2026-9040","ts":1789378790330,"field":"cvss","old":"7.7","new":null},{"seq":194751,"id":"CVE-2026-9040","ts":1789378790330,"field":"severity","old":"high","new":"none"},{"seq":193539,"id":"CVE-2026-9040","ts":1789376535555,"field":"cvss","old":null,"new":"7.7"},{"seq":193538,"id":"CVE-2026-9040","ts":1789376535555,"field":"severity","old":"none","new":"high"},{"seq":192326,"id":"CVE-2026-9040","ts":1789373640149,"field":"cvss","old":"7.7","new":null},{"seq":192325,"id":"CVE-2026-9040","ts":1789373640149,"field":"severity","old":"high","new":"none"},{"seq":191111,"id":"CVE-2026-9040","ts":1789369508372,"field":"cvss","old":null,"new":"7.7"},{"seq":191110,"id":"CVE-2026-9040","ts":1789369508372,"field":"severity","old":"none","new":"high"},{"seq":189898,"id":"CVE-2026-9040","ts":1789368461707,"field":"cvss","old":"7.7","new":null},{"seq":189897,"id":"CVE-2026-9040","ts":1789368461707,"field":"severity","old":"high","new":"none"},{"seq":188681,"id":"CVE-2026-9040","ts":1789365243658,"field":"cvss","old":null,"new":"7.7"},{"seq":188680,"id":"CVE-2026-9040","ts":1789365243658,"field":"severity","old":"none","new":"high"},{"seq":187468,"id":"CVE-2026-9040","ts":1789363481032,"field":"cvss","old":"7.7","new":null},{"seq":187467,"id":"CVE-2026-9040","ts":1789363481032,"field":"severity","old":"high","new":"none"},{"seq":186254,"id":"CVE-2026-9040","ts":1789361247901,"field":"cvss","old":null,"new":"7.7"},{"seq":186253,"id":"CVE-2026-9040","ts":1789361247901,"field":"severity","old":"none","new":"high"},{"seq":185041,"id":"CVE-2026-9040","ts":1789358391845,"field":"cvss","old":"7.7","new":null},{"seq":185040,"id":"CVE-2026-9040","ts":1789358391845,"field":"severity","old":"high","new":"none"},{"seq":183290,"id":"CVE-2026-9040","ts":1789354332313,"field":"cvss","old":null,"new":"7.7"},{"seq":183289,"id":"CVE-2026-9040","ts":1789354332313,"field":"severity","old":"none","new":"high"},{"seq":182083,"id":"CVE-2026-9040","ts":1789353336020,"field":"cvss","old":"7.7","new":null},{"seq":182082,"id":"CVE-2026-9040","ts":1789353336020,"field":"severity","old":"high","new":"none"},{"seq":180876,"id":"CVE-2026-9040","ts":1789350305363,"field":"cvss","old":null,"new":"7.7"},{"seq":180875,"id":"CVE-2026-9040","ts":1789350305363,"field":"severity","old":"none","new":"high"},{"seq":179669,"id":"CVE-2026-9040","ts":1789348309361,"field":"cvss","old":"7.7","new":null},{"seq":179668,"id":"CVE-2026-9040","ts":1789348309361,"field":"severity","old":"high","new":"none"},{"seq":178462,"id":"CVE-2026-9040","ts":1789346385308,"field":"cvss","old":null,"new":"7.7"},{"seq":178461,"id":"CVE-2026-9040","ts":1789346385308,"field":"severity","old":"none","new":"high"},{"seq":177255,"id":"CVE-2026-9040","ts":1789343189326,"field":"cvss","old":"7.7","new":null},{"seq":177254,"id":"CVE-2026-9040","ts":1789343189326,"field":"severity","old":"high","new":"none"},{"seq":175372,"id":"CVE-2026-9040","ts":1789334897912,"field":"cvss","old":null,"new":"7.7"},{"seq":175371,"id":"CVE-2026-9040","ts":1789334897912,"field":"severity","old":"none","new":"high"},{"seq":174167,"id":"CVE-2026-9040","ts":1789333709612,"field":"cvss","old":"7.7","new":null},{"seq":174166,"id":"CVE-2026-9040","ts":1789333709612,"field":"severity","old":"high","new":"none"},{"seq":172981,"id":"CVE-2026-9040","ts":1789331107190,"field":"cvss","old":null,"new":"7.7"},{"seq":172980,"id":"CVE-2026-9040","ts":1789331107190,"field":"severity","old":"none","new":"high"}]}