CVE-2023-4211
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
| Software | From | Fixed in |
|---|---|---|
| arm / bifrost_gpu_kernel_driver | r0p0 | r43p0 |
| arm / valhall_gpu_kernel_driver | r19p0 | r43p0 |
| arm / midgard_gpu_kernel_driver | r12p0 | r32p0.x |
| arm / 5th_gen_gpu_architecture_kernel_driver | r41p0 | r43p0 |
- https://arstechnica.com/security/2023/10/vulnerable-arm-gpu-drivers-under-active-exploitation-patches-may-not-be-available/
- https://chromereleases.googleblog.com/2023/08/long-term-support-channel-update-for_23.html
- https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-chromeos_25.html
- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
- https://source.android.com/docs/security/bulletin/pixel/2023-09-01
- https://www.bleepingcomputer.com/news/security/arm-warns-of-mali-gpu-flaws-likely-exploited-in-targeted-attacks/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime