5.5
Medium
Exploited
CVE-2023-4211 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Not observed so far
Weakness
CWE-416
Description
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Midgard GPU Kernel Driver | Versions not published | |
| Bifrost GPU Kernel Driver | Versions not published | |
| Valhall GPU Kernel Driver | Versions not published | |
| Arm 5th Gen GPU Architecture Kernel Driver | Versions not published |
References
- developer.arm.com developer.arm.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Midgard GPU Kernel Driver
The 5 CVEs of Midgard GPU Kernel Driver →
CVE-2024-0671
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall…
6.8
Medium
CVE-2023-6241
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall…
7.8
High
CVE-2023-6143
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall…
8.4
High
CVE-2023-4272
A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory
5.5
Medium