Lucene search

ArmCVE-2023-4295

HistoryNov 07, 2023 - 4:15 p.m.

CVE-2023-4295

2023-11-0716:15:29

CWE-190

CWE-416

Arm

web.nvd.nist.gov

cve-2023-4295

nvd

security

vulnerability

gpu

memory

access

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

20.0%

JSON

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Affected configurations

Nvd

Node

armmali_gpu_kernel_driverRanger41p0–r43p0

armvalhall_gpu_kernel_driverRanger29p0–r42p0

VendorProductVersionCPE
armmali_gpu_kernel_driver*cpe:2.3:a:arm:mali_gpu_kernel_driver:*:*:*:*:*:*:*:*
armvalhall_gpu_kernel_driver*cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arm	mali_gpu_kernel_driver	*	cpe:2.3:a:arm:mali_gpu_kernel_driver::::::::
arm	valhall_gpu_kernel_driver	*	cpe:2.3:a:arm:valhall_gpu_kernel_driver::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Valhall GPU Kernel Driver",
    "vendor": "Arm Ltd",
    "versions": [
      {
        "changes": [
          {
            "at": "r43p0",
            "status": "unaffected"
          }
        ],
        "lessThan": "r43p0",
        "status": "affected",
        "version": "r29p0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Arm 5th Gen GPU Architecture Kernel  Driver",
    "vendor": "Arm Ltd",
    "versions": [
      {
        "changes": [
          {
            "at": "r43p0",
            "status": "unaffected"
          }
        ],
        "lessThan": "r43p0",
        "status": "affected",
        "version": "r41p0",
        "versionType": "patch"
      }
    ]
  }
]

References

packetstormsecurity.com/files/176109/Arm-Mali-CSF-Overflow-Use-After-Free.html

developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

20.0%

JSON

Related for CVE-2023-4295