CVE-2023-4211 - Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Project:Arm
Product:Mali GPU Kernel Driver
Date Added:2023-10-03Due Date:2023-10-24
Vulnerability Name
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Description
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
https://nvd.nist.gov/vuln/detail/CVE-2023-4211