Use After Free Vulnerability in Arm Ltd Bifrost GPU Kernel Driver

CVE-2023-5249

What is CVE-2023-5249?

The vulnerability in Arm Ltd Bifrost and Valhall GPU Kernel Drivers arises from a Use After Free issue that allows a local non-privileged user to manipulate memory processing through a software race condition. By carefully preparing the system’s memory, an attacker could exploit this flaw, leading to potential unauthorized actions within the driver operation. This vulnerability affects specific versions of the Bifrost GPU Kernel Driver (from r35p0 to r40p0) and the Valhall GPU Kernel Driver (also from r35p0 to r40p0).

References