Use-after-free in Valhall GPU Kernel Driver and Bifrost GPU Kernel Driver - CVE-2023-5249

Vulnerability identifier: #VU86160

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-5249

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to escalate privileges on the device.

The vulnerability exists due to a use-after-free error in Arm kernel. A local application can execute arbitrary code on the system with elevated privileges.

Valhall GPU Kernel Driver
Bifrost GPU Kernel Driver
Google Android

Install updates from vendor's website.

Valhall GPU Kernel Driver - update to r41p0
Bifrost GPU Kernel Driver - update to r41p0
Google Android - addressed in versions 11 2024-02-05, 12L 2024-02-05, 12 2024-02-05, 13 2024-02-05, 14 2024-02-05

• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

• Privilege escalation in Arm Valhall and Bifrost GPU kernel drivers
• Multiple vulnerabilities in Google Android