Junglewise Threat Intelligence

CVE-2024-4610: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CVE-2024-4610 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2024-06-12

Technologies: Arm Bifrost GPU Kernel Driver, Arm Valhall GPU Kernel Driver. Vendors: Arm.

Executive brief

A use-after-free vulnerability in Arm Bifrost and Valhall GPU kernel drivers allows a local, non-privileged user to perform improper GPU memory processing operations. This flaw enables unauthorized access to already freed memory, potentially leading to local privilege escalation.

Affected products

  • Arm Bifrost GPU Kernel Driver r34p0 through r40p0
  • Arm Valhall GPU Kernel Driver r34p0 through r40p0

Timeline

  • 2024-06-07: disclosed: NVD Published Date
  • 2024-06-12: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2024-06-12: advisory: Published date provided in advisory metadata

Related threats