CVE-2023-5427

Mali GPU Kernel Driver allows improper GPU processing operations

Severity Score

7.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r44p0 through r45p0; Valhall GPU Kernel Driver: from r44p0 through r45p0; Arm 5th Gen GPU Architecture Kernel Driver: from r44p0 through r45p0.

Un usuario local sin privilegios puede realizar operaciones de procesamiento de GPU inadecuadas para obtener acceso a la memoria ya liberada.

ARM Mali r44p0 suffers from a use-after-free vulnerability by freeing waitqueue with elements on it.

*Credits: N/A

CVSS Scores

NISTv3.1 7.8

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-10-05 CVE Reserved
2023-12-01 CVE Published
2023-12-07 EPSS Updated
2024-08-02 CVE Updated
2024-08-02 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-416: Use After Free

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC
http://packetstormsecurity.com/files/176029/ARM-Mali-r44p0-Use-After-Free.html	2024-08-02

URL	Date	SRC

URL	Date	SRC
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities	2023-12-06

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Arm Search vendor "Arm"		5th Gen Gpu Architecture Kernel Driver Search vendor "Arm" for product "5th Gen Gpu Architecture Kernel Driver"				>= r44p0 < r46p0 Search vendor "Arm" for product "5th Gen Gpu Architecture Kernel Driver" and version " >= r44p0 < r46p0"		-		Affected
Arm Search vendor "Arm"		Bifrost Gpu Kernel Driver Search vendor "Arm" for product "Bifrost Gpu Kernel Driver"				>= r44p0 < r46p0 Search vendor "Arm" for product "Bifrost Gpu Kernel Driver" and version " >= r44p0 < r46p0"		-		Affected
Arm Search vendor "Arm"		Valhall Gpu Kernel Driver Search vendor "Arm" for product "Valhall Gpu Kernel Driver"				>= r44p0 < r46p0 Search vendor "Arm" for product "Valhall Gpu Kernel Driver" and version " >= r44p0 < r46p0"		-		Affected