CVE-2023-6241: high-severity vulnerability in Arm Ltd Midgard GPU Kernel Driver
Mali GPU Kernel Driver allows improper GPU memory processing operations
Published · Updated
Follow this CVE+ Monitor Valhall GPU Kernel Driver+ Monitor Arm 5th Gen GPU Architecture Kernel Driver
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.7%
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition to perform improper memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Midgard GPU Kernel Driver: from r13p0 through r32p0; Bifrost GPU Kernel Driver: from r11p0 through r25p0; Valhall GPU Kernel Driver: from r19p0 through r25p0, from r29p0 through r46p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r46p0.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Arm Ltd · Arm 5th Gen GPU Architecture Kernel DriverArm Ltd · Bifrost GPU Kernel DriverArm Ltd · Midgard GPU Kernel DriverArm Ltd · Valhall GPU Kernel DriverRelated CVEs — Arm Ltd Midgard GPU Kernel Driver
In the same product, most dangerous first.
CVE-2023-4211MEDIUMMali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsEPSS 1.0%KEVCVE-2024-4610HIGHMali GPU Kernel Driver allows improper GPU memory processing operationsEPSS 0.8%KEVCVE-2026-0860HIGHMali GPU Kernel Driver allows access to sensitive kernel informationEPSS 0.4%CVE-2025-0072HIGHMali GPU Kernel Driver allows improper GPU memory processing operationsEPSS 0.4%CVE-2025-3212MEDIUMMali GPU Kernel Driver allows access to already freed memoryEPSS 0.3%CVE-2023-4272MEDIUMMali GPU Kernel Driver exposes sensitive data from freed memoryEPSS 0.3%