Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HArm Bifrost Gpu Kernel Driver
APPArmr34p0 – r41p0 (excl.)Arm Valhall Gpu Kernel Driver
APPArmr34p0 – r41p0 (excl.)
CISA KEV — detailsi
- Vendori
- Arm
- Producti
- Mali GPU Kernel Driver
- Added to KEVi
- June 12, 2024
- Remediation deadline (US Federal)i
- July 3, 2024(overdue)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
Related vulnerabilities
Use-after-free w sterowniku GPU Arm Mali — Midgard, Bifrost, Valhall
Use-after-free w sterowniku jądra Arm Mali GPU (Valhall)
Use-after-free w sterowniku jądra GPU Arm Mali (Midgard/Bifrost/Valhall)
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations ...
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. Thi...