Lucene search

[email protected]CVE-2023-26083

HistoryApr 06, 2023 - 4:15 p.m.

CVE-2023-26083

2023-04-0616:15:07

CWE-401

[email protected]

web.nvd.nist.gov

377

In Wild

cve-2023-26083

memory leak

mali gpu

kernel driver

midgard

bifrost

valhall

avalon

vulnerability

nvd

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.038 Low

EPSS

Percentile

91.9%

JSON

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Affected configurations

NVD

Node

armavalon_gpu_kernel_driverRanger41p0–r43p0

armbifrost_gpu_kernel_driverRanger0p0–r43p0

armmidgardRanger6p0–r32p0

armvalhall_gpu_kernel_driverRanger19p0–r43p0

CPENameOperatorVersion
arm:avalon_gpu_kernel_driverarm avalon gpu kernel driverltr43p0
arm:bifrost_gpu_kernel_driverarm bifrost gpu kernel driverltr43p0
arm:midgardarm midgardler32p0
arm:valhall_gpu_kernel_driverarm valhall gpu kernel driverltr43p0

CPE	Name	Operator	Version
arm:avalon_gpu_kernel_driver	arm avalon gpu kernel driver	lt	r43p0
arm:bifrost_gpu_kernel_driver	arm bifrost gpu kernel driver	lt	r43p0
arm:midgard	arm midgard	le	r32p0
arm:valhall_gpu_kernel_driver	arm valhall gpu kernel driver	lt	r43p0