HIGH

CVE-2024-4610

Arm Bifrost Gpu Kernel Driver 2024-06-07 CVSS v3.1
CVSS
7.8
KEV

Description

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.

Summary dbcve.org

Use After Free vulnerability in Arm Bifrost and Valhall GPU kernel drivers allows local non-privileged users to access freed memory through improper GPU memory processing operations, potentially leading to privilege escalation or system instability.

Mitigation

Apply the vendor-provided driver update (r41p0 or later) to replace affected Bifrost and Valhall GPU kernel drivers. Prioritize systems with direct GPU access.

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

0.76%
Probability of exploitation in next 30 days
53.3th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE