CVE-2023-4211

2023-10-0118:15:09

CWE-416

[email protected]

web.nvd.nist.gov

local user access

memory processing

gpu vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0.213

Percentile

96.4%

JSON

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Affected configurations

Nvd

Node

arm5th_gen_gpu_architecture_kernel_driverRanger41p0–r42p0

armbifrostRanger0p0–r42p0

armmidgardRanger12p0–r32p0

armvalhallRanger19p0–r42p0

VendorProductVersionCPE
arm5th_gen_gpu_architecture_kernel_driver*cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*
armbifrost*cpe:2.3:a:arm:bifrost:*:*:*:*:*:*:*:*
armmidgard*cpe:2.3:a:arm:midgard:*:*:*:*:*:*:*:*
armvalhall*cpe:2.3:a:arm:valhall:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arm	5th_gen_gpu_architecture_kernel_driver	*	cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver::::::::
arm	bifrost	*	cpe:2.3:a:arm:bifrost::::::::
arm	midgard	*	cpe:2.3:a:arm:midgard::::::::
arm	valhall	*	cpe:2.3:a:arm:valhall::::::::