Junglewise Threat Intelligence

CVE-2023-4211: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CVE-2023-4211 · Severity: critical · CVSS 5.5 · Exploited in the wild · Published 2023-10-03

Technologies: Arm 5th Gen GPU Architecture Kernel Driver, Arm Valhall GPU Kernel Driver, Arm Bifrost GPU Kernel Driver. Vendors: Arm.

Executive brief

A use-after-free vulnerability in the Arm Mali GPU Kernel Driver allows a local, non-privileged user to perform improper memory processing operations. This flaw enables unauthorized access to previously freed memory, potentially leading to information disclosure or further exploitation.

Affected products

  • Arm 5th Gen GPU Architecture Kernel Driver r41p0 to r42p0
  • Arm Bifrost GPU Kernel Driver r0p0 to r42p0
  • Arm Midgard GPU Kernel Driver r12p0 to r32p0
  • Arm Valhall GPU Kernel Driver r19p0 to r42p0

Timeline

  • 2023-10-03: disclosed
  • 2023-10-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2023-10-03: exploited: Reported as exploited in the wild at time of publication

Related threats