Non-Privileged Local GPU Memory Leak in Windows Graphics Driver
CVE-2023-4211 Published on October 1, 2023
Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Known Exploited Vulnerability
This Arm Mali GPU Kernel Driver Use-After-Free Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
The following remediation steps are recommended / required by October 24, 2023: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vulnerability Analysis
CVE-2023-4211 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. This vulnerability is known to be actively exploited by threat actors. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
What is a Dangling pointer Vulnerability?
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
CVE-2023-4211 has been classified to as a Dangling pointer vulnerability or weakness.
Products Associated with CVE-2023-4211
Want to know whenever a new CVE is published for Arm products? stack.watch will email you.
Affected Versions
Arm Ltd Midgard GPU Kernel Driver:- Version r12p0, <= r32p0 is affected.
- Version r0p0, <= r42p0 is affected.
- Version r19p0, <= r42p0 is affected.
- Version r41p0, <= r42p0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.