Vulnerabilities > CVE-2023-28147 - Unspecified vulnerability in ARM products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

arm

NVD

Published: 2023-06-02

Updated: 2023-06-09

Summary

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0.

Vulnerable Configurations

Part	Description	Count
Application	Arm ARM Valhall GPU Kernel Driver R19P0 ARM Valhall GPU Kernel Driver R29P0 ARM Valhall GPU Kernel Driver R34P0 ARM Valhall GPU Kernel Driver R38P0 ARM Valhall GPU Kernel Driver R38P1 ARM Valhall GPU Kernel Driver R38P2 ARM Valhall GPU Kernel Driver R39P0 ARM Valhall GPU Kernel Driver R40P0 ARM Valhall GPU Kernel Driver R41P0 ARM Valhall GPU Kernel Driver R42P0 ARM Avalon GPU Kernel Driver R41P0 ARM Avalon GPU Kernel Driver R42P0 ARM Bifrost GPU Kernel Driver R34P0 ARM Bifrost GPU Kernel Driver R38P1 ARM Bifrost GPU Kernel Driver R38P2 ARM Bifrost GPU Kernel Driver R39P0 ARM Bifrost GPU Kernel Driver R40P0 ARM Bifrost GPU Kernel Driver R41P0 ARM Bifrost GPU Kernel Driver R42P0 ARM Midgard GPU Kernel Driver *	20

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities