Skip to content
OpenAdvisories
Medium · 5.9 Public exploit CVE-2024-1065 EUVD-2024-16840GHSA-jhp9-93xh-vh3m

Mali GPU Kernel Driver allows improper GPU memory processing operations

Published Apr 19, 2024 · Updated Aug 1, 2024 · Assigned by Arm

Vendor: Arm Product: Arm 5th Gen GPU Architecture Kernel Driver Product: Bifrost GPU Kernel Driver Product: Valhall GPU Kernel Driver

Description

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r45p0 through r48p0; Valhall GPU Kernel Driver: from r45p0 through r48p0; Arm 5th Gen GPU Architecture Kernel Driver: from r45p0 through r48p0.

Affected products

VendorProductAffectedFixed
Arm Bifrost GPU Kernel Driver r45p0 – ≤ r48p0 —
Arm Valhall GPU Kernel Driver r45p0 – ≤ r48p0 —
Arm Arm 5th Gen GPU Architecture Kernel Driver r45p0 – ≤ r48p0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 2

References