Listen to this Post
How CVE-2025-8045 works: This vulnerability is a use-after-free flaw in the Arm Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver. It allows a local non-privileged user process to perform improper GPU processing operations. The issue arises when the driver manages memory allocations for GPU commands. Specifically, during command submission, the driver may free a memory buffer but later reference it again. This occurs due to insufficient tracking of buffer lifecycles. Affected versions include r53p0 through r54p1 for both drivers. An attacker can craft malicious GPU commands to trigger this flaw. By doing so, they cause the driver to access freed memory. This leads to memory corruption, which can result in information disclosure or arbitrary code execution. The vulnerability is exploitable locally without privileges, posing a significant risk. It leverages the GPU’s processing capabilities to bypass memory safety. The freed memory may contain sensitive kernel data or function pointers. Overwriting these can allow control flow hijacking. Consequently, an attacker could escalate privileges or compromise the system. Mitigation requires patching the driver to properly manage memory.
Platform: Arm GPU Drivers
Version: r53p0 to r54p1
Vulnerability: Use After Free
Severity: Critical
Date: 12/01/2025
Prediction: Patch within 30 days
What Undercode Say:
Analytics
Bash commands to check affected systems:
`uname -r`
`lsmod | grep arm_gpu`
`dmesg | grep valhall`
Code snippet for detection:
include
// Check driver version via ioctl
How Exploit:
Craft GPU commands triggering use-after-free, corrupt memory to gain code execution.
Protection from this CVE
Update GPU drivers, restrict GPU access, apply kernel hardening.
Impact:
Local privilege escalation, memory disclosure, system compromise.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
