PT-2024-18006 · Arm · Arm 5Th Gen Gpu Architecture Kernel Driver

Published 2024-05-03 · Updated 2025-03-27 · CVE-2024-1395

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Arm 5th Gen GPU Architecture Kernel Driver versions r41p0 through r47p0

Description The issue allows a local non-privileged user to make improper GPU memory processing operations, potentially giving them access to already freed memory if the system's memory is carefully prepared.

Recommendations For Arm 5th Gen GPU Architecture Kernel Driver versions r41p0 through r47p0, update to a version outside of the affected range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-329506991

CVE-2024-1395

Affected Products

Arm 5Th Gen Gpu Architecture Kernel Driver

References · 6

• https://osv.dev/vulnerability/CVE-2024-1395 · Vendor Advisory
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1395 · Security Note
• https://t.me/cvenotify/116563 · Telegram Post
• https://twitter.com/CVEnew/status/1786408487821476334 · Twitter Post
• https://t.me/cvenotify/79048 · Telegram Post