CVE-2023-5427: Fixes in Linux Kernel
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r44p0 through r45p0; Valhall GPU Kernel Driver: from r44p0 through r45p0; Arm 5th Gen GPU Architecture Kernel Driver: from r44p0 through r45p0.
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-5427?
CVE-2023-5427 is a vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver that allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.
How severe is CVE-2023-5427?
CVE-2023-5427 has a severity rating of 7.8 (high).
What software is affected by CVE-2023-5427?
Arm 5th Gen GPU Architecture Kernel Driver, Arm Bifrost GPU Kernel Driver, and Arm Valhall GPU Kernel Driver versions ranging from r44p0 to r46p0 are affected by CVE-2023-5427.
How can a local non-privileged user exploit CVE-2023-5427?
A local non-privileged user can exploit CVE-2023-5427 by making improper GPU processing operations to gain access to already freed memory.
Where can I find more information about CVE-2023-5427?
You can find more information about CVE-2023-5427 at the Arm Security Center's website and Packet Storm Security's website.