CVE-2024-1395: Mali GPU Kernel Driver allows improper GPU memory processing operations
First published: Fri May 03 2024(Updated: )
Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory. This issue affects Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r47p0.
Credit: arm-security@arm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver | >=r41p0<r48p0 |
Remedy
This issue is fixed in Arm 5th Gen GPU Architecture Kernel Driver r48p0. Users are recommended to upgrade if they are impacted by this issue.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-1395?
CVE-2024-1395 has a high severity due to its potential to allow unauthorized access to freed GPU memory.
How do I fix CVE-2024-1395?
To fix CVE-2024-1395, update your Android device to the latest firmware version that addresses this vulnerability.
Who is affected by CVE-2024-1395?
CVE-2024-1395 affects devices running the Android operating system that utilize the Arm 5th Gen GPU Architecture.
What impact does CVE-2024-1395 have?
The impact of CVE-2024-1395 includes the possibility of unauthorized memory access, which can lead to further exploitation of the system.
Is CVE-2024-1395 a local or remote vulnerability?
CVE-2024-1395 is classified as a local vulnerability, requiring non-privileged user access to exploit.
- agent/title
- agent/remedy
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/type
- agent/author
- agent/references
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- vendor/google
- canonical/android
- vendor/arm
- canonical/arm ltd arm 5th gen gpu architecture kernel driver
- version/arm ltd arm 5th gen gpu architecture kernel driver/r41p0