CVE-2024-6790: medium-severity vulnerability in Arm Ltd Bifrost GPU Kernel Driver
Mali GPU Kernel Driver can cause the whole system to become unresponsive
Published
Follow this CVE+ Monitor Valhall GPU Kernel Driver+ Monitor Arm 5th Gen GPU Architecture Kernel Driver
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4epss 0.2%
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a non-privileged user process to make valid GPU memory processing operations, including via WebGL or WebGPU, to cause the whole system to become unresponsive.This issue affects Bifrost GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Valhall GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Arm 5th Gen GPU Architecture Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Arm Ltd · Arm 5th Gen GPU Architecture Kernel DriverArm Ltd · Bifrost GPU Kernel DriverArm Ltd · Valhall GPU Kernel DriverRelated CVEs — Arm Ltd Bifrost GPU Kernel Driver
In the same product, most dangerous first.
CVE-2023-4211MEDIUMMali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsEPSS 1.0%KEVCVE-2024-4610HIGHMali GPU Kernel Driver allows improper GPU memory processing operationsEPSS 0.8%KEVCVE-2023-6241HIGHMali GPU Kernel Driver allows improper GPU memory processing operationsEPSS 0.7%CVE-2026-0860HIGHMali GPU Kernel Driver allows access to sensitive kernel informationEPSS 0.4%CVE-2025-0072HIGHMali GPU Kernel Driver allows improper GPU memory processing operationsEPSS 0.4%CVE-2025-3212MEDIUMMali GPU Kernel Driver allows access to already freed memoryEPSS 0.3%