Lucene search

K
cve[email protected]CVE-2023-28147
HistoryJun 02, 2023 - 12:15 a.m.

CVE-2023-28147

2023-06-0200:15:09
web.nvd.nist.gov
23
cve-2023-28147
arm mali
gpu kernel driver
memory access
security vulnerability
nvd
exploit

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and Arm’s GPU Architecture Gen5 r41p0 through r42p0 before r43p0.

Affected configurations

NVD
Node
armavalon_gpu_kernel_driverRanger41p0r43p0
OR
armbifrost_gpu_kernel_driverRanger17p0r43p0
OR
armmidgard_gpu_kernel_driverRanger29p0r32p0
OR
armvalhall_gpu_kernel_driverRanger19p0r43p0

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%

Related for CVE-2023-28147