Arm Mali GPU Kernel Driver Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 30/03/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| bifrost gpu kernel driver | = r39p0≥ r0p0, ≤ r38p1 | |
| midgard gpu kernel driver | ≥ r4p0, ≤ r31p0 | |
| valhall gpu kernel driver | = r39p0≥ r19p0, ≤ r38p1 |
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free