MEDIUM · 5.5

CVE-2023-28469

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through ...

Vulnerability Description

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ArmAvalon Gpu Kernel Driver>= r41p0, < r43p0
ArmValhall Gpu Kernel Driver>= r29p0, < r43p0

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-28469?

CVE-2023-28469 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through ...

How severe is CVE-2023-28469?

CVE-2023-28469 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-28469?

Check the references section above for vendor advisories and patch information. Affected products include: Arm Avalon Gpu Kernel Driver, Arm Valhall Gpu Kernel Driver.