PT-2023-14927 · Arm · Arm Mali Gpu Kernel Driver

Published 2023-03-06 · Updated 2023-12-13 · CVE-2022-46395

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions Midgard r0p0 through r32p0 Arm Mali GPU Kernel Driver versions Bifrost r0p0 through r41p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r41p0 Arm Mali GPU Kernel Driver version Avalon r41p0

Description A non-privileged user can make improper GPU processing operations to gain access to already freed memory.

Recommendations For versions Midgard r0p0 through r32p0, update to a version after r32p0. For versions Bifrost r0p0 through r41p0, update to version r42p0 or later. For versions Valhall r19p0 through r41p0, update to version r42p0 or later. For version Avalon r41p0, update to version r42p0 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-267357916

CVE-2022-46395

Affected Products

Arm Mali Gpu Kernel Driver

References · 9

• https://osv.dev/vulnerability/CVE-2022-46395 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46395 · Security Note
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://developer.arm.com/support/arm-security-updates · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-267357916 · Vendor Advisory
• http://packetstormsecurity.com/files/172855/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html · Note
• https://source.android.com/security/bulletin/2023-05-01 · Note
• https://t.me/cibsecurity/59479 · Telegram Post
• https://t.me/freedomf0x/19832 · Telegram Post