CVE-2023-5249: Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory…

PriorityP335high7CVSS 3.1

AVLACHPRLUINSUCHIHAH

EPSS

0.15%

4.7th percentile

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Bifrost GPU Kernel Driver: from r35p0 through r40p0; Valhall GPU Kernel Driver: from r35p0 through r40p0.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
arm	bifrost_gpu_kernel_driver	r35p0 – r40p0	—
arm	valhall_gpu_kernel_driver	r35p0 – r40p0	—
arm_ltd	bifrost_gpu_kernel_driver	r35p0 – r40p0	—
arm_ltd	valhall_gpu_kernel_driver	r35p0 – r40p0	—
google	android	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.