PT-2024-2629 · Arm · Arm Valhall Gpu Kernel Driver+3

Published 2024-03-04 · Updated 2025-02-10 · CVE-2023-6241

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arm Ltd Midgard GPU Kernel Driver versions r13p0 through r32p0 Arm Ltd Bifrost GPU Kernel Driver versions r11p0 through r25p0 Arm Ltd Valhall GPU Kernel Driver versions r19p0 through r25p0, versions r29p0 through r46p0 Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r41p0 through r46p0

Description The issue is related to a Use After Free vulnerability in the Arm Mali GPU drivers, which can be exploited by a local non-privileged user to perform improper memory processing operations. This can lead to arbitrary kernel code execution and potentially gain root access on an Android device, even with Memory Tagging Extension (MTE) enabled. The vulnerability is caused by the use of memory after it has been freed.

Recommendations For Arm Ltd Midgard GPU Kernel Driver versions r13p0 through r32p0, update to a version outside of this range to resolve the issue. For Arm Ltd Bifrost GPU Kernel Driver versions r11p0 through r25p0, update to a version outside of this range to resolve the issue. For Arm Ltd Valhall GPU Kernel Driver versions r19p0 through r25p0 and versions r29p0 through r46p0, update to a version outside of these ranges to resolve the issue. For Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r41p0 through r46p0, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the vulnerable GPU drivers until a patch is available. Restrict access to the vulnerable drivers to minimize the risk of exploitation. Avoid using the affected GPU drivers in sensitive operations until the issue is resolved.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-316206835

BDU:2024-02696

CVE-2023-6241

Affected Products

Arm 5Th Gen Gpu Architecture Kernel Driver

Arm Bifrost Gpu Kernel Driver

Arm Ltd Midgard Gpu Kernel Driver

Arm Valhall Gpu Kernel Driver

References · 19

• 🔥 https://github.com/SmileTabLabo/CVE-2023-6241 · Exploit
• 🔥 https://github.com/s1204IT/CVE-2023-6241 · Exploit
• https://bdu.fstec.ru/vul/2024-02696 · Security Note
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-6241 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6241 · Security Note
• https://t.me/cybersecuritytechnologies/10189 · Telegram Post
• https://twitter.com/GHSecurityLab/status/1770851530809225507 · Twitter Post
• https://twitter.com/mmolgtm/status/1769762842582941769 · Twitter Post
• https://twitter.com/GHSecurityLab/status/1769782288533881051 · Twitter Post
• https://twitter.com/JamesHarvey1989/status/1831798529733619842 · Twitter Post
• https://twitter.com/kevin_backhouse/status/1769784405554344280 · Twitter Post
• https://t.me/cvenotify/110652 · Telegram Post
• https://twitter.com/lcheylus/status/1770180693907157145 · Twitter Post
• https://twitter.com/CVEnew/status/1764635343754592480 · Twitter Post