# CVE-2026-9040

## Summary

- **CVE ID:** CVE-2026-9040
- **Severity:** HIGH
- **CVSS Score:** 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- **CWE:** CWE-362
- **Published:** Sep 8, 2026
- **Last Modified:** Sep 10, 2026

## Description

A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to cause a denial of service or disclose sensitive information.



This issue affects Bifrost GPU Kernel Driver: from r12p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r19p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.

## Affected Products

- Arm Ltd — Bifrost GPU Kernel Driver (r12p0)
- Arm Ltd — Bifrost GPU Kernel Driver (r50p0)
- Arm Ltd — Bifrost GPU Kernel Driver (r54p1)
- Arm Ltd — Valhall GPU Kernel Driver (r19p0)
- Arm Ltd — Valhall GPU Kernel Driver (r50p0)
- Arm Ltd — Valhall GPU Kernel Driver (r55p0)
- Arm Ltd — Valhall GPU Kernel Driver (r56p0)
- Arm Ltd — Arm 5th Gen GPU Architecture Kernel Driver (r41p0)
- Arm Ltd — Arm 5th Gen GPU Architecture Kernel Driver (r50p0)
- Arm Ltd — Arm 5th Gen GPU Architecture Kernel Driver (r55p0)
- Arm Ltd — Arm 5th Gen GPU Architecture Kernel Driver (r56p0)

## References

- [CNA](https://support.arm.com/documentation/111552/1-0/?lang=en)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.11%
- **EPSS Percentile:** 1.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._