Mali GPU Kernel Driver exposes sensitive data from freed memory
CVE-2023-4272

5.5MEDIUM

Key Information:

Vendor: Arm
Status: Midgard Gpu Kernel Driver; Bifrost Gpu Kernel Driver; Valhall Gpu Kernel Driver; Arm 5th Gen Gpu Architecture Kernel Driver
Vendor: CVE Published:; 7 November 2023

🔔 Create Arm Vulnerability Alert

What is CVE-2023-4272?

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Arm 5th Gen GPU Architecture Kernel Driver r41p0

Bifrost GPU Kernel Driver r0p0

Midgard GPU Kernel Driver r8p0

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20...

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Nov 7, 2023
Vulnerability Reserved
Aug 9, 2023

Credit

Jann Horn at Google

JSON

Arm