ID CVE-2023-26083
Summary Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
References
Vulnerable Configurations
  • cpe:2.3:a:arm:midgard:r28p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:midgard:r28p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:midgard:r28p0-01eac0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:midgard:r28p0-01eac0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:midgard:r30p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:midgard:r30p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:midgard:r30p0-01eac0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:midgard:r30p0-01eac0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:midgard:r32p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:midgard:r32p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r0p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r0p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r34p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r34p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p1:*:*:*:*:*:*:*
    cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p1:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p2:*:*:*:*:*:*:*
    cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p2:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r39p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r39p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r40p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r40p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r41p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r41p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r42p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r42p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r19p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r19p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r29p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r29p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r34p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r34p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p1:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p1:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p2:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p2:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r39p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r39p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r40p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r40p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r41p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r41p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:valhall_gpu_kernel_driver:r42p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:valhall_gpu_kernel_driver:r42p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:avalon_gpu_kernel_driver:r41p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:avalon_gpu_kernel_driver:r41p0:*:*:*:*:*:*:*
  • cpe:2.3:a:arm:avalon_gpu_kernel_driver:r42p0:*:*:*:*:*:*:*
    cpe:2.3:a:arm:avalon_gpu_kernel_driver:r42p0:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE CWE-401
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 21-04-2023 - 17:31
Published 06-04-2023 - 16:15
Last modified 21-04-2023 - 17:31
Back to Top