Skip to content
OpenAdvisories
High · 7.8 Public exploit CVE-2023-6241 EUVD-2023-58487GHSA-p6cr-4f2h-m98v

Mali GPU Kernel Driver allows improper GPU memory processing operations

Published Mar 4, 2024 · Updated Mar 13, 2025 · Assigned by Arm

Vendor: Arm Product: Arm 5th Gen GPU Architecture Kernel Driver Product: Bifrost GPU Kernel Driver Product: Midgard GPU Kernel Driver Product: Valhall GPU Kernel Driver

Description

Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition to perform improper memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Midgard GPU Kernel Driver: from r13p0 through r32p0; Bifrost GPU Kernel Driver: from r11p0 through r25p0; Valhall GPU Kernel Driver: from r19p0 through r25p0, from r29p0 through r46p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r46p0.

Affected products

VendorProductAffectedFixed
Arm Midgard GPU Kernel Driver r13p0 – ≤ r32p0 —
Arm Bifrost GPU Kernel Driver r11p0 – ≤ r25p0 —
Arm Valhall GPU Kernel Driver r19p0 – ≤ r25p0, r29p0 – ≤ r46p0 —
Arm Arm 5th Gen GPU Architecture Kernel Driver r41p0 – ≤ r46p0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 3 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References