CVE-2024-1065

Published Apr 19, 2024

Last updated a year ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-1065 is identified as a Use After Free vulnerability present in specific Arm Ltd GPU Kernel Drivers. This flaw allows a local, non-privileged user to perform improper GPU memory processing operations. Through these operations, an attacker can gain access to memory that has already been freed. The vulnerability impacts Bifrost GPU Kernel Driver versions from r45p0 through r48p0, Valhall GPU Kernel Driver versions from r45p0 through r48p0, and Arm 5th Gen GPU Architecture Kernel Driver versions from r45p0 through r48p0.

Description
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r45p0 through r48p0; Valhall GPU Kernel Driver: from r45p0 through r48p0; Arm 5th Gen GPU Architecture Kernel Driver: from r45p0 through r48p0.
Source
arm-security@arm.com
NVD status
Analyzed
Products
5th_gen_gpu_architecture_kernel_driver, bifrost_gpu_kernel_driver, valhall_gpu_kernel_driver

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.9
Impact score
3.4
Exploitability score
2.5
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Severity
MEDIUM

Weaknesses

arm-security@arm.com
CWE-416
nvd@nist.gov
CWE-416

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

7

Configurations