Vulnerabilities > CVE-2023-26083 - Memory Leak vulnerability in ARM products

CVSS 3.3 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

local

low complexity

arm

CWE-401

NVD

Published: 2023-04-06

Updated: 2023-04-21

Summary

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Vulnerable Configurations

Part	Description	Count
Application	Arm ARM Midgard R28P0 ARM Midgard R28P0-01Eac0 ARM Midgard R30P0 ARM Midgard R30P0-01Eac0 ARM Midgard R32P0 ARM Bifrost GPU Kernel Driver R0P0 ARM Bifrost GPU Kernel Driver R34P0 ARM Bifrost GPU Kernel Driver R38P1 ARM Bifrost GPU Kernel Driver R38P2 ARM Bifrost GPU Kernel Driver R39P0 ARM Bifrost GPU Kernel Driver R40P0 ARM Bifrost GPU Kernel Driver R41P0 ARM Bifrost GPU Kernel Driver R42P0 ARM Valhall GPU Kernel Driver R19P0 ARM Valhall GPU Kernel Driver R29P0 ARM Valhall GPU Kernel Driver R34P0 ARM Valhall GPU Kernel Driver R38P0 ARM Valhall GPU Kernel Driver R38P1 ARM Valhall GPU Kernel Driver R38P2 ARM Valhall GPU Kernel Driver R39P0 ARM Valhall GPU Kernel Driver R40P0 ARM Valhall GPU Kernel Driver R41P0 ARM Valhall GPU Kernel Driver R42P0 ARM Avalon GPU Kernel Driver R41P0 ARM Avalon GPU Kernel Driver R42P0	25

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References