CVE-2023-4211: Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Other sources
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
If vendor mitigations are unavailable, discontinue use of the affected components: Arm Bifrost Android Gralloc Module; Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver; Arm Ltd Valhall GPU Kernel Driver; Arm Mali Graphics Processing Unit (GPU); Arm Midgard GPU Kernel Driver.
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-40088
- CVE-2023-40077
- CVE-2023-40076
- CVE-2023-45866
- CVE-2022-40507
- CVE-2023-4863
- CVE-2023-35674
- CVE-2023-4369
- CVE-2023-20593
- CVE-2023-4128
- CVE-2023-4147
- CVE-2023-3390
- CVE-2023-32804
- CVE-2022-40982
- CVE-2023-2312
- CVE-2023-4349
- CVE-2023-4350
- CVE-2023-4351
- CVE-2023-4352
- CVE-2023-4353
- CVE-2023-4354
- CVE-2023-4355
- CVE-2023-4356
- CVE-2023-4357
- CVE-2023-4358
- CVE-2023-4359
- CVE-2023-4360
- CVE-2023-4361
- CVE-2023-4362
- CVE-2023-4363
- CVE-2023-4364
- CVE-2023-4365
- CVE-2023-4366
- CVE-2023-4367
- CVE-2023-4368
- CVE-2023-21264
- CVE-2020-29374
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-4211.
What is the title of this vulnerability?
The title of this vulnerability is Arm Mali GPU Kernel Driver Use-After-Free Vulnerability.
What is the description of this vulnerability?
This vulnerability allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
Who is affected by this vulnerability?
Arm Mali GPU Kernel Driver is affected by this vulnerability.
Are there any patches available for this vulnerability?
Patches may not be available for this vulnerability, but it is recommended to check the references for updates and patches.