Medium severity · published Jun 2, 2023
CVE-2023-28147
An issue was discovered in the Arm Mali GPU Kernel Driver
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
Avalon Gpu Kernel Driver · Arm
r41p0 before r43p0 · source: NVD
BG
Bifrost Gpu Kernel Driver · Arm
r17p0 before r43p0 · source: NVD
MG
Midgard Gpu Kernel Driver · Arm
r29p0 through r32p0 · source: NVD
VG
Valhall Gpu Kernel Driver · Arm
r19p0 before r43p0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-28147
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-28147
Vendor Advisory
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
More from Avalon Gpu Kernel Driver
8.8
CVE-2022-46394
An issue was discovered in the Arm Mali GPU Kernel Driver
8.8
CVE-2022-46395
An issue was discovered in the Arm Mali GPU Kernel Driver
5.5
CVE-2023-28469
An issue was discovered in the Arm Mali GPU Kernel Driver
3.3
CVE-2022-46396
An issue was discovered in the Arm Mali Kernel Driver
3.3
CVE-2022-46781
An issue was discovered in the Arm Mali GPU Kernel Driver