PT-2023-14926 · Arm · Arm Mali Gpu Kernel Driver

Published 2023-03-08 · Updated 2023-05-01 · CVE-2022-46394

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions Valhall r39p0 through r41p0 Arm Mali GPU Kernel Driver versions Avalon r41p0 before r42p0

Description A non-privileged user can make improper GPU processing operations to gain access to already freed memory.

Recommendations For versions Valhall r39p0 through r41p0, update to version r42p0 or later. For versions Avalon r41p0 before r42p0, update to version r42p0 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-267360595

CVE-2022-46394

Affected Products

Arm Mali Gpu Kernel Driver

References · 9

• https://osv.dev/vulnerability/CVE-2022-46394 · Vendor Advisory
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-267360595 · Vendor Advisory
• https://developer.arm.com/support/arm-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46394 · Security Note
• https://t.me/cvenotify/45822 · Telegram Post
• https://t.me/cibsecurity/59689 · Telegram Post
• https://source.android.com/security/bulletin/2023-05-01 · Note
• https://t.me/cvenotify/46119 · Telegram Post