Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

CVE-2023-33200
4.7MEDIUM

Key Information

Vendor
Arm
Status
Bifrost GPU Kernel Driver
Valhall GPU Kernel Driver
Arm 5th Gen GPU Architecture Kernel Driver
Vendor
CVE Published:
3 October 2023

Summary

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.

Affected Version(s)

Bifrost GPU Kernel Driver < r17p0

Valhall GPU Kernel Driver < r19p0

Arm 5th Gen GPU Architecture Kernel Driver < r41p0

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.