CVE-2023-26083

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Affected products

Arm Mali Gpu Kernel Driver

Arm 5th Gen Gpu Architecture Kernel Driver

< r43p0

Arm Bifrost Gpu Kernel Driver

< r43p0

Arm Midgard Gpu Kernel Driver

≤ r32p0

Arm Valhall Gpu Kernel Driver

< r43p0

CVSS 3.1

3.3 LOW

EPSS

1.3% (67th percentile)

Weakness

CWE-401

NVD status

Analyzed

Published

2023-04-06