CVE-2023-4211: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CVE-2023-4211 · Severity: critical · CVSS 5.5 · Exploited in the wild · Published 2023-10-03
A use-after-free vulnerability in the Arm Mali GPU Kernel Driver allows a local, non-privileged user to perform improper memory processing operations. This flaw enables unauthorized access to previously freed memory, potentially leading to information disclosure or further exploitation.
Yes. CVE-2023-4211 is known to be exploited in the wild, first recorded on 3 October 2023. Treat it as urgent.
How severe is CVE-2023-4211?
Critical severity, with a CVSS score of 5.5, published 3 October 2023.
Which products and versions are affected?
Arm 5th Gen GPU Architecture Kernel Driver r41p0 to r42p0; Arm Bifrost GPU Kernel Driver r0p0 to r42p0; Arm Midgard GPU Kernel Driver r12p0 to r32p0; Arm Valhall GPU Kernel Driver r19p0 to r42p0.
Is there a fix for CVE-2023-4211?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2023-4211 attacked?
It is attacked with local access, in a software library.
Am I affected by CVE-2023-4211?
Check whether you run Arm Mali GPU Kernel Driver. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Affected products
Arm 5th Gen GPU Architecture Kernel Driver r41p0 to r42p0
Arm Bifrost GPU Kernel Driver r0p0 to r42p0
Arm Midgard GPU Kernel Driver r12p0 to r32p0
Arm Valhall GPU Kernel Driver r19p0 to r42p0
Timeline
2023-10-03: disclosed
2023-10-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
2023-10-03: exploited: Reported as exploited in the wild at time of publication