CVE-2023-5249: Mali GPU Kernel Driver allows improper GPU memory processing operations
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Bifrost GPU Kernel Driver: from r35p0 through r40p0; Valhall GPU Kernel Driver: from r35p0 through r40p0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5249?
CVE-2023-5249 is classified as a high-severity vulnerability due to its potential to allow local non-privileged users to exploit a software race condition.
How do I fix CVE-2023-5249?
To mitigate CVE-2023-5249, update the affected Arm Bifrost and Valhall GPU kernel drivers to the latest versions that address this vulnerability.
Which systems are affected by CVE-2023-5249?
CVE-2023-5249 affects systems running specific versions of Arm Bifrost and Valhall GPU kernel drivers, as well as devices using the Google Android operating system.
What type of vulnerability is CVE-2023-5249?
CVE-2023-5249 is a Use After Free vulnerability that can lead to improper memory processing operations.
Can CVE-2023-5249 be exploited remotely?
CVE-2023-5249 requires local access to the affected system for exploitation, meaning it cannot be exploited remotely.