CVE-2023-28469: Use After Free
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-28469?
CVE-2023-28469 is a vulnerability in the Arm Mali GPU Kernel Driver that allows non-privileged users to gain access to already freed memory by performing improper GPU processing operations.
How severe is CVE-2023-28469?
CVE-2023-28469 has a severity rating of 5.5, which is considered medium severity.
Which software versions are affected by CVE-2023-28469?
CVE-2023-28469 affects Arm Mali GPU Kernel Driver versions Valhall r29p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0.
How can a non-privileged user exploit CVE-2023-28469?
A non-privileged user can exploit CVE-2023-28469 by performing improper GPU processing operations to gain access to already freed memory.
Is there a fix available for CVE-2023-28469?
Yes, the fix for CVE-2023-28469 is to update to version r43p0 or later of the Arm Mali GPU Kernel Driver.