medium5.5Known exploited
CVE-2023-4211
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-10-03. Federal due date: 2023-10-24.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Impact
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arm | 5th Gen Gpu Architecture Kernel Driver | from r41p0 before r43p0 |
| Arm | Bifrost Gpu Kernel Driver | from r0p0 before r43p0 |
| Arm | Midgard Gpu Kernel Driver | from r12p0 through r32p0 |
| Arm | Valhall Gpu Kernel Driver | from r19p0 before r43p0 |