Use-after-free in Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver - CVE-2023-4295
Published: December 4, 2023
Vulnerability identifier: #VU83833
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-4295
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error caused by improper GPU memory processing operations. A local user can execute arbitrary code with elevated privileges.
Affected software
Valhall GPU Kernel Driver
Arm 5th Gen GPU Architecture Kernel Driver
Google Android
Arm 5th Gen GPU Architecture Kernel Driver
Google Android
How to mitigate CVE-2023-4295
Install updates from vendor's website.
Valhall GPU Kernel Driver - update to r43p0
Arm 5th Gen GPU Architecture Kernel Driver - update to r43p0
Google Android - addressed in versions 11 2024-01-05, 12L 2024-01-05, 12 2024-01-05, 13 2024-01-05, 14 2024-01-05
Arm 5th Gen GPU Architecture Kernel Driver - update to r43p0
Google Android - addressed in versions 11 2024-01-05, 12L 2024-01-05, 12 2024-01-05, 13 2024-01-05, 14 2024-01-05