Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-1065
PUBLISHED
More InfoOfficial Page
Assigner-Arm
Assigner Org ID-56a131ea-b967-4a0d-a41e-5f3549952846
View Known Exploited Vulnerability (KEV) details
Published At-19 Apr, 2024 | 08:51
Updated At-01 Aug, 2024 | 18:26
Rejected At-
▼CVE Numbering Authority (CNA)
Mali GPU Kernel Driver allows improper GPU memory processing operations

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r45p0 through r48p0; Valhall GPU Kernel Driver: from r45p0 through r48p0; Arm 5th Gen GPU Architecture Kernel Driver: from r45p0 through r48p0.

Affected Products
Vendor
Arm LimitedArm Ltd
Product
Bifrost GPU Kernel Driver
Default Status
unaffected
Versions
Affected
  • From r45p0 through r48p0 (patch)
    • -> unaffectedfromr49p0
Vendor
Arm LimitedArm Ltd
Product
Valhall GPU Kernel Driver
Default Status
unaffected
Versions
Affected
  • From r45p0 through r48p0 (patch)
    • -> unaffectedfromr49p0
Vendor
Arm LimitedArm Ltd
Product
Arm 5th Gen GPU Architecture Kernel Driver
Default Status
unaffected
Versions
Affected
  • From r45p0 through r48p0 (patch)
    • -> unaffectedfromr49p0
Problem Types
TypeCWE IDDescription
CWECWE-416CWE-416 Use After Free
Type: CWE
CWE ID: CWE-416
Description: CWE-416 Use After Free
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

This issue is fixed in Bifrost, Valhall and Arm 5th Gen GPU Architecture Kernel Driver r49p0. Users are recommended to upgrade if they are impacted by this issue. 

Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
N/A
Hyperlink: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Vendor
Arm Limitedarm
Product
valhall_gpu_kernel_driver
CPEs
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r45p0:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From r45p0 through r48p0 (custom)
Vendor
Arm Limitedarm
Product
bifrost_gpu_kernel_driver
CPEs
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r45p0:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From r45p0 through r48p0 (custom)
Vendor
Arm Limitedarm
Product
5th_gen_gpu_architecture_kernel_driver
CPEs
  • cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:r45p0:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From r45p0 through r48p0 (custom)
Metrics
VersionBase scoreBase severityVector
3.15.9MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Version: 3.1
Base score: 5.9
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
x_transferred
Hyperlink: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
Resource:
x_transferred
Details not found