Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2023-5249

Mali GPU Kernel Driver allows improper GPU memory processing operations

Description

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Bifrost GPU Kernel Driver: from r35p0 through r40p0; Valhall GPU Kernel Driver: from r35p0 through r40p0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arm Ltd Bifrost GPU Kernel Driver

Default version status: unaffected

  • r35p0 to ≤ r40p0affected

Arm Ltd Valhall GPU Kernel Driver

Default version status: unaffected

  • r35p0 to ≤ r40p0affected

References