PT-2024-14939 · Arm · Arm 5Th Gen Gpu Architecture Kernel Driver+1

Published 2024-05-03 · Updated 2025-03-27 · CVE-2023-6363

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Valhall GPU Kernel Driver versions r41p0 through r47p0 Arm 5th Gen GPU Architecture Kernel Driver versions r41p0 through r47p0

Description The issue allows a local non-privileged user to make improper GPU memory processing operations. If the system's memory is carefully prepared by the user, this could give them access to already freed memory.

Recommendations For Valhall GPU Kernel Driver versions r41p0 through r47p0, update to a version outside of this range to resolve the issue. For Arm 5th Gen GPU Architecture Kernel Driver versions r41p0 through r47p0, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to GPU memory processing operations until a patch is available.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-303632069

CVE-2023-6363

Affected Products

Arm 5Th Gen Gpu Architecture Kernel Driver

Valhall Gpu Kernel Driver

References · 6

• https://osv.dev/vulnerability/CVE-2023-6363 · Vendor Advisory
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6363 · Security Note
• https://twitter.com/CVEnew/status/1786408485174841572 · Twitter Post
• https://t.me/cvenotify/116533 · Telegram Post
• https://t.me/cvenotify/79046 · Telegram Post