Use-after-free in Chrome OS - CVE-2023-4211

Vulnerability identifier: #VU79503

CSH Severity: High

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4211

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within Mali GPU Kernel Driver. A local application can trigger memory corruption and execute arbitrary code with elevated privileges.

Note, the vulnerability is being actively exploited in the wild.

Chrome OS
Google Android
Midgard GPU Kernel Driver
Bifrost GPU Kernel Driver
Valhall GPU Kernel Driver
Arm 5th Gen GPU Architecture Kernel Driver
Pixel

Install updates from vendor's website.

Chrome OS - addressed in versions 115.0.5790.182, 114.0.5735.331, 116.0.5845.120
Arm 5th Gen GPU Architecture Kernel Driver - update to r43p0
Bifrost GPU Kernel Driver - update to r43p0
Valhall GPU Kernel Driver - update to r43p0
Google Android - addressed in versions 11 2023-10-05, 12L 2023-10-05, 12 2023-10-05, 13 2023-10-05
Pixel - update to 2023-09-01

• https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-chromeos_14.html
• https://source.android.com/docs/security/bulletin/pixel/2023-09-01
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

• Security restrictions bypass in Google ChromeOS
• Security features bypass in Google ChromeOS
• Security features bypass in Google ChromeOS LTC-114
• Multiple vulnerabilities in Google ChromeOS
• Security features bypass in Google Pixel
• Privilege escalation in Arm Mali GPU Kernel Drivers
• Multiple vulnerabilities in Google Android