CVE-2023-4211
Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
In short
A local user can access memory that was already freed on a Mali GPU, potentially exposing sensitive data or causing system instability. This happens because the GPU driver doesn't properly manage memory cleanup.
Technical detail
A use-after-free vulnerability (CWE-416) in the Mali GPU kernel driver allows a local unprivileged attacker to perform improper GPU memory operations and access freed memory. No special privileges are required; the attack vector is local and exploits insufficient memory state management in the GPU driver, potentially leading to information disclosure or denial of service.
Summary generated and translated by AI from the official description.
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Arm Ltd · Arm 5th Gen GPU Architecture Kernel DriverArm Ltd · Bifrost GPU Kernel DriverArm Ltd · Midgard GPU Kernel DriverArm Ltd · Valhall GPU Kernel DriverWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →