Vulnerability Details CVE-2023-5249
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Bifrost GPU Kernel Driver: from r35p0 through r40p0; Valhall GPU Kernel Driver: from r35p0 through r40p0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.3%
CVSS Severity
CVSS v3 Score 7.0
References
Products affected by CVE-2023-5249
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r35p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r36p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p1
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p2
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r39p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r40p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r35p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r36p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r37p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p1
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p2
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r39p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r40p0