CVE-2023-26083
CVE-2023-26083
In short
A memory leak in Mali GPU drivers allows unprivileged users to access sensitive kernel information through normal GPU operations. This could expose data that should remain private, though the severity is low.
Technical detail
Memory leak vulnerability affecting multiple Mali GPU kernel driver families (Midgard, Bifrost, Valhall, Avalon) enables non-privileged users to retrieve sensitive kernel metadata via valid GPU processing operations. The vulnerability stems from improper memory management (CWE-401) across specified version ranges, allowing information disclosure with local access requirements.
Summary generated and translated by AI from the official description.
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
n/a · n/apublic PoCs found — 1
githubgithub.com/Noverisp3/CVE-2023-26083★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →