- Vendor / Project
- Arm
- Product
- Mali GPU Kernel Driver
- Date added
- Jun 12, 2024
- Due date
- Jul 3, 2024
- Known ransomware use
- Unknown
- CWEs
- CWE-416
Description
Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.