PT-2023-21594 · Arm · Arm Mali Gpu Kernel Driver

Published 2023-06-01 · Updated 2025-01-09 · CVE-2023-28147

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions Midgard r29p0 through r32p0 Arm Mali GPU Kernel Driver versions Bifrost r17p0 through r42p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r42p0 Arm Mali GPU Kernel Driver versions Arm's GPU Architecture Gen5 r41p0 through r42p0

Description A non-privileged user can make improper GPU processing operations to gain access to already freed memory.

Recommendations For versions Midgard r29p0 through r32p0, update to a version after r32p0. For versions Bifrost r17p0 through r42p0, update to version r43p0 or later. For versions Valhall r19p0 through r42p0, update to version r43p0 or later. For versions Arm's GPU Architecture Gen5 r41p0 through r42p0, update to version r43p0 or later.

Fix

Related Identifiers

ASB-A-274005916

CVE-2023-28147

Affected Products

Arm Mali Gpu Kernel Driver

References · 3

• https://osv.dev/vulnerability/CVE-2023-28147 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28147 · Security Note
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory