logo

CVE-2023-4211 - Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Project:Arm

Product:Mali GPU Kernel Driver

Date Added:2023-10-03Due Date:2023-10-24

Vulnerability Name

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Description

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

https://nvd.nist.gov/vuln/detail/CVE-2023-4211