CVE-2026-11891
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Mali GPU Userspace Driver allows access to already freed memory
Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GPU Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Valhall GPU Userspace Driver
- Vendor
- Arm Ltd
- Product
- Valhall GPU Userspace Driver
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| r46p0 | affected | patch | Unavailable | r49p5 | None listed |
| r50p0 | affected | patch | Unavailable | r54p3 | None listed |
| r55p0 | affected | patch | Unavailable | Unavailable | None listed |
| r56p0 | unaffected | patch | Unavailable | Unavailable | None listed |
Arm 5th Gen GPU Architecture Userspace Driver
- Vendor
- Arm Ltd
- Product
- Arm 5th Gen GPU Architecture Userspace Driver
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| r46p0 | affected | patch | Unavailable | r49p5 | None listed |
| r50p0 | affected | patch | Unavailable | r54p3 | None listed |
| r55p0 | affected | patch | Unavailable | Unavailable | None listed |
| r56p0 | unaffected | patch | Unavailable | Unavailable | None listed |