Use After Free Vulnerability in Arm Ltd Bifrost GPU Kernel Driver
CVE-2023-5249

7HIGH

Key Information:

Vendor

Arm
Status
Bifrost Gpu Kernel Driver
Valhall Gpu Kernel Driver
Vendor
CVE Published:
5 February 2024

What is CVE-2023-5249?

The vulnerability in Arm Ltd Bifrost and Valhall GPU Kernel Drivers arises from a Use After Free issue that allows a local non-privileged user to manipulate memory processing through a software race condition. By carefully preparing the system’s memory, an attacker could exploit this flaw, leading to potential unauthorized actions within the driver operation. This vulnerability affects specific versions of the Bifrost GPU Kernel Driver (from r35p0 to r40p0) and the Valhall GPU Kernel Driver (also from r35p0 to r40p0).

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Bifrost GPU Kernel Driver r35p0

Valhall GPU Kernel Driver r35p0

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20...

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.