Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-4272 EUVD-2023-54143GHSA-gh94-rfj3-873r

Mali GPU Kernel Driver exposes sensitive data from freed memory

Published Nov 7, 2023 · Updated Sep 4, 2024 · Assigned by Arm

Description

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

Affected products

VendorProductAffectedFixed
Arm Midgard GPU Kernel Driver r8p0 – ≤ r32p0 —
Arm Bifrost GPU Kernel Driver r0p0 – < r42p0 r42p0
Arm Valhall GPU Kernel Driver r19p0 – < r42p0 r42p0
Arm Arm 5th Gen GPU Architecture Kernel Driver r41p0 – < r42p0 r42p0

Advisories 1

References