Vulnerability Details CVE-2024-4610
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.0%
CVSS Severity
CVSS v3 Score 7.8
Proposed Action
Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
Ransomware Campaign
Unknown
References
Products affected by CVE-2024-4610
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r34p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r35p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r36p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p1
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r38p2
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r39p0
-
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r40p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r34p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r35p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r36p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r37p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p1
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r38p2
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r39p0
-
cpe:2.3:a:arm:valhall_gpu_kernel_driver:r40p0