Vulnerability · Published Nov 7, 2023 · Assigned by Arm
CVE-2023-4272Mali GPU Kernel Driver exposes sensitive data from freed memory
Medium 5.5
In plain English
A medium-severity information exposure in Arm 5th Gen GPU Architecture Kernel Driver from Arm Ltd. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 72.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Arm Ltd | Midgard GPU Kernel Driver | r8p0 – through r32p0 |
| Arm Ltd | Bifrost GPU Kernel Driver | r0p0 – before r42p0 |
| Arm Ltd | Valhall GPU Kernel Driver | r19p0 – before r42p0 |
| Arm Ltd | Arm 5th Gen GPU Architecture Kernel Driver | r41p0 – before r42p0 |
Weakness: CWE-1251, CWE-200 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N