CVE-2023-6363: Mali GPU Kernel Driver allows improper GPU processing operations
First published: Fri May 03 2024(Updated: )
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory. This issue affects Valhall GPU Kernel Driver: from r41p0 through r47p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r47p0.
Credit: arm-security@arm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver | >=r41p0<r48p0 | |
| Arm Ltd Valhall GPU Kernel Driver | >=r41p0<r48p0 |
Remedy
This issue is fixed in Valhall and Arm 5th Gen GPU Architecture Kernel Driver r48p0. Users are recommended to upgrade if they are impacted by this issue.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-6363?
CVE-2023-6363 is classified as a high-severity vulnerability affecting the Arm 5th Gen GPU Architecture Kernel Driver.
How do I fix CVE-2023-6363?
To mitigate CVE-2023-6363, users should update their Android devices with the latest security patches provided by Google.
What is the impact of CVE-2023-6363?
CVE-2023-6363 allows a local non-privileged user to perform improper GPU memory processing operations, which may lead to system instability.
Which software is affected by CVE-2023-6363?
CVE-2023-6363 affects devices running Android with the Arm 5th Generation GPU Kernel Driver.
Who is affected by CVE-2023-6363?
Local non-privileged users of Android devices utilizing the Arm 5th Gen GPU architecture are at risk of exploitation due to CVE-2023-6363.
- agent/title
- agent/remedy
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- vendor/google
- canonical/android
- vendor/arm
- canonical/arm ltd arm 5th gen gpu architecture kernel driver
- version/arm ltd arm 5th gen gpu architecture kernel driver/r41p0
- canonical/arm ltd valhall gpu kernel driver
- version/arm ltd valhall gpu kernel driver/r41p0