PT-2023-21739 · Arm · Arm Mali Gpu Kernel Driver

Published 2023-06-02 · Updated 2025-01-08 · CVE-2023-28469

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions Valhall r29p0 through r42p0 Arm Mali GPU Kernel Driver versions Arm's GPU Architecture Gen5 r41p0 through r42p0

Description An issue was discovered in the Arm Mali GPU Kernel Driver, where a non-privileged user can make improper GPU processing operations to gain access to already freed memory.

Recommendations For versions Valhall r29p0 through r42p0, update to version r43p0 or later. For versions Arm's GPU Architecture Gen5 r41p0 through r42p0, update to version r43p0 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-274006187

CVE-2023-28469

Affected Products

Arm Mali Gpu Kernel Driver

References · 4

• https://osv.dev/vulnerability/CVE-2023-28469 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28469 · Security Note
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://t.me/cvenotify/106839 · Telegram Post