CVE-2026-11891Disclosure

LOWCVSS 5.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GPU Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://support.arm.com/documentation/111552/1-0/?lang=en

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Full discourse1 post

Baldly Rudy@baldlyrudy46d
Disclosure
Arm just disclosed a new Mali GPU driver vulnerability: CVE-2026-11891. -Use-after-free bug -Affects Valhall + Arm 5th Gen userspace drivers -Can be triggered by non-privileged GPU workloads -WebGL/WebGPU are listed attack paths r46p0–r55p0 affected -Fixed in r56p0 This could matter for Android handhelds using affected Mali driver stacks, but device-by-device exposure still needs to be confirmed.
Post summary
Arm disclosed CVE-2026-11891, a use‑after‑free in Mali GPU drivers exploitable via WebGL/WebGPU, with a patch (r56p0) now available.
10071516
1.8K followersView on X

Explore more

Back to dashboard