Arm · Mali Graphics Processing Unit (GPU)
CVE-2023-26083
Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
ما هي
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
CISA: Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
ما العمل
Apply updates per vendor instructions.
الموعد النهائي للوكالات الفدرالية الأمريكية: 28 أبريل 2023
ثغرات مُستغلّة أخرى من Arm
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 07/07/2023 | Mali GPU Kernel Driver Use-After-Free | Mali Graphics Processing Unit (GPU) | مرتفع 8.8 | 3.0% |
| 30/03/2023 | Mali GPU Kernel Driver Unspecified | Mali Graphics Processing Unit (GPU) | مرتفع 7.8 | 1.1% |
| 30/03/2023 | Mali GPU Kernel Driver Use-After-Free | Mali Graphics Processing Unit (GPU) | مرتفع 8.8 | 18% |
| 03/11/2021 | Use-After-Free | Mali Graphics Processing Unit (GPU) | مرتفع 8.8 | 12% |
| 03/11/2021 | Unspecified | Mali Graphics Processing Unit (GPU) | مرتفع 8.8 | 5.4% |
| 12/06/2024 | Use-After-Free | Mali GPU Kernel Driver | مرتفع 7.4 | 0.8% |
| 03/10/2023 | Use-After-Free | Mali GPU Kernel Driver | متوسطة 5.5 | 1.1% |
| 03/11/2021 | Out-of-Bounds Write | Trusted Firmware | متوسطة 5.5 | 3.1% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.