Arm Mali GPU Kernel Driver Information Disclosure Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 07/04/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| 5th gen gpu architecture kernel driver | ≥ r41p0, < r43p0 | r43p0 |
| bifrost gpu kernel driver | ≥ r0p0, < r43p0 | r43p0 |
| midgard gpu kernel driver | ≥ r6p0, ≤ r32p0 | |
| valhall gpu kernel driver | ≥ r19p0, < r43p0 | r43p0 |
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free