Mali GPU Kernel Driver allows improper GPU processing operations

CVE-2023-5427
7.8HIGH

Key Information

Vendor
Arm
Status
Bifrost GPU Kernel Driver
Valhall GPU Kernel Driver
Arm 5th Gen GPU Architecture Kernel Driver
Vendor
CVE Published:
1 December 2023

Summary

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r44p0 through r45p0; Valhall GPU Kernel Driver: from r44p0 through r45p0; Arm 5th Gen GPU Architecture Kernel Driver: from r44p0 through r45p0.

Affected Version(s)

Bifrost GPU Kernel Driver <= r44p0

Valhall GPU Kernel Driver <= r44p0

Arm 5th Gen GPU Architecture Kernel Driver <= r44p0

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.