CVE-2023-5249
High
Description
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Bifrost GPU Kernel Driver: from r35p0 through r40p0; Valhall GPU Kernel Driver: from r35p0 through r40p0.
SeverityHigh
CVSS7.0
Exploit probability—
Product
Arm Bifrost Gpu Kernel Driver
PublishedFeb 5, 2024
First seenFeb 5, 2024
Weakness typeCWE-416Use after free
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arm bifrost_gpu_kernel_driver | r35p0 ≤ v ≤ r40p0 | — |
| arm valhall_gpu_kernel_driver | r35p0 ≤ v ≤ r40p0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.