CVE-2023-4211
Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The Mali GPU kernel driver is affected. A local user without special privileges can trigger improper GPU memory handling to access memory that has already been freed, which could expose sensitive data or lead to further compromise of the system.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Timeline
- CVE published
- Added to CISA KEV
CISA has evidence of exploitation in the wild
- CISA remediation deadline
Due date for US federal agencies to patch
- Record last updated
Affected versions
- Arm Ltd Midgard GPU Kernel Driver
From r12p0 · through r32p0
- Arm Ltd Bifrost GPU Kernel Driver
From r0p0 · through r42p0
- Arm Ltd Valhall GPU Kernel Driver
From r19p0 · through r42p0
- Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver
From r41p0 · through r42p0