CVE-2023-5427: Mali GPU Kernel Driver allows improper GPU processing operations

Reference Links

• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
• http://packetstormsecurity.com/files/176029/ARM-Mali-r44p0-Use-After-Free.html
• https://source.android.com/docs/security/bulletin/2024-01-01/#asterisk
• https://source.android.com/docs/security/bulletin/2024-01-01 (Advisory)
• https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-chromeos.html (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 5747166286807692363

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-0204
• CVE-2024-1086
• CVE-2023-28746
• CVE-2024-2173
• CVE-2024-2174
• CVE-2024-2176

Frequently Asked Questions

• What is CVE-2023-5427?

  CVE-2023-5427 is a vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver that allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.

• How severe is CVE-2023-5427?

  CVE-2023-5427 has a severity rating of 7.8 (high).

• What software is affected by CVE-2023-5427?

  Arm 5th Gen GPU Architecture Kernel Driver, Arm Bifrost GPU Kernel Driver, and Arm Valhall GPU Kernel Driver versions ranging from r44p0 to r46p0 are affected by CVE-2023-5427.

• How can a local non-privileged user exploit CVE-2023-5427?

  A local non-privileged user can exploit CVE-2023-5427 by making improper GPU processing operations to gain access to already freed memory.

• Where can I find more information about CVE-2023-5427?

  You can find more information about CVE-2023-5427 at the Arm Security Center's website and Packet Storm Security's website.