Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-5249


Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Bifrost GPU Kernel Driver: from r35p0 through r40p0; Valhall GPU Kernel Driver: from r35p0 through r40p0.


Published

2024-02-05T10:15:08.310

Last Modified

2024-11-21T08:41:22.310

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.0 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-416
  • Type: Primary
    CWE-416

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application arm bifrost_gpu_kernel_driver ≤ r40p0 Yes
Application arm valhall_gpu_kernel_driver ≤ r40p0 Yes

References