CVE-2024-4610: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2024-06-12. EPSS: 0.8% chance of exploitation in the next 30 days.

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.

Affected products

• Arm Bifrost GPU Kernel Driver: from r34p0, before r41p0 (fixed in r41p0)
• Arm Valhall GPU Kernel Driver: from r34p0, before r41p0 (fixed in r41p0)

Published 2024-06-07. Last modified 2026-06-17.