CVE-2023-33200

published 2023-10-03

CVE-2023-33200: A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by…

Priority P4 18 medium 4.7 CVSS 3.1

AV L AC H PR L UI N S U C N I N A H

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
arm	bifrost_gpu_kernel_driver	>= r17p0 < r44p1	r44p1
arm	mali_gpu_kernel_driver	>= r41p0 < r44p1	r44p1
arm	valhall_gpu_kernel_driver	>= r19p0 < r44p1	r44p1
arm_ltd	arm_5th_gen_gpu_architecture_kernel_driver	>= r41p0 < r44p1	r44p1
arm_ltd	bifrost_gpu_kernel_driver	>= r17p0 < r44p1	r44p1
arm_ltd	valhall_gpu_kernel_driver	>= r19p0 < r44p1	r44p1
google	android	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-416