CVE-2025-2879

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-2879
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2879.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-2879
Aliases
Published
2025-12-01T11:15:46.437Z
Modified
2026-03-12T20:14:59.916381Z
Severity
  • 5.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to expose sensitive data.This issue affects Valhall GPU Kernel Driver: from r29p0 through r49p4, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p4, from r50p0 through r54p0.

References

Affected packages

Git /

Affected ranges

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "r41p0"
            },
            {
                "fixed": "r49p5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "r50p0"
            },
            {
                "fixed": "r54p1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "r29p0"
            },
            {
                "fixed": "r49p5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "r50p0"
            },
            {
                "fixed": "r54p1"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2879.json"