low3.3Known exploited
CVE-2023-26083
Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-04-07. Federal due date: 2023-04-28.
Apply updates per vendor instructions.
Impact
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arm | 5th Gen Gpu Architecture Kernel Driver | from r41p0 before r43p0 |
| Arm | Bifrost Gpu Kernel Driver | from r0p0 before r43p0 |
| Arm | Midgard Gpu Kernel Driver | from r6p0 through r32p0 |
| Arm | Valhall Gpu Kernel Driver | from r19p0 before r43p0 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
- https://www.cybersecurity-help.cz/vdb/SB2023033049
- https://www.cybersecurity-help.cz/vulnerabilities/74210/
- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
- https://www.cybersecurity-help.cz/vdb/SB2023033049
- https://www.cybersecurity-help.cz/vulnerabilities/74210/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26083