CVE-2023-3889 Mali GPU Kernel Driver exposes sensitive data from freed memory

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory...

kernel: Linux kernel: Denial of service in lontium-lt9611 GPU driver due to NULL pointer dereference

A flaw was found in the Linux kernel's lontium-lt9611 GPU driver. A local user with low privileges could trigger a NULL pointer dereference in the lt9611connectorinit function. This vulnerability can lead to a system crash, resulting in a Denial of Service DoS...

kernel: drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback

A function prototype mismatch was found in the AMD GPU driver's DPM table callbacks. When kCFI Control Flow Integrity is enabled, the mismatched types cause CFI validation failures, potentially crashing the kernel...

CVE-2023-31019

NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context...

UBUNTU-CVE-2023-31022

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service...

Null pointer dereference

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service...

UBUNTU-CVE-2023-31018

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service...

CVE-2023-31022 CVE

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service...

CVE-2023-31018 CVE

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service...

NVIDIA GPU Display Driver Security Vulnerability

NVIDIA GPU Display Driver is an American NVIDIA driver for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which stems from the inclusion of a vulnerability that allows a low-privileged Windows user to perfor...

Security Bulletin: NVIDIA GPU Display Driver - October 2023

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

The vulnerability of GPU driver components in iPadOS and iOS operating systems allows attackers to execute arbitrary code.

The vulnerability of GPU driver in iPadOS and iOS systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ARM Mali GPU Driver Buffer Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. The ARM Mali GPU Driver suffers from a buffer error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU processing operations by exploiting a software race condition...

ARM Mali GPU Kernel Driver < r43p0 Improper Memory Access (CVE-2023-4211)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r43p0 running on Midgard, Bifrost, Valhall or 5th Gen architecture. It is, therefore affected by a improper memory access vulnerability. A local non- privileged user can make improper GPU memory processing...

ARM Mali GPU Kernel Driver < r30p0 / < r31p0 Improper Memory Access (CVE-2021-28664)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r30p0 running on Bifrost or Valhall architecture or prior to r31p0 running on Midgard architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can get a write acce...

ARM Mali GPU Kernel Driver < r37p0 Use After Free (CVE-2022-28350)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r37p0 running on Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. Note that Ness...

ARM Mali GPU Kernel Driver < r38p2 / < r40p0 Use After Free (CVE-2022-38181)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r38p2 or r40p0 running on Midgard, Bifrost or Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already...

Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c

...

Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities

Google has released its monthly security updates for the Android operating system, addressing 46 new software vulnerabilities. Among these, three vulnerabilities have been identified as actively exploited in targeted attacks. One of the vulnerabilities tracked as CVE-2023-26083 is a memory leak...

CVE-2023-3355

A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msmgemsubmit.c code in the submitlookupcmds function, which fails because it lacks a check of the return value of kmalloc. This issue allows a local user to crash the system...