Use-after-free in ARM products - CVE-2023-6241
Published: March 4, 2024 / Updated: July 3, 2025
Vulnerability identifier: #VU87035
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear
CVE-ID: CVE-2023-6241
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
Public exploit is available
Vendor: ARM
Affected software:
Midgard GPU Kernel Driver
Bifrost GPU Kernel Driver
Valhall GPU Kernel Driver
Arm 5th Gen GPU Architecture Kernel Driver
Midgard GPU Kernel Driver
Bifrost GPU Kernel Driver
Valhall GPU Kernel Driver
Arm 5th Gen GPU Architecture Kernel Driver
Detailed vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error. A local user can trigger a use-after-free error and execute arbitrary code on the system.
How to mitigate CVE-2023-6241
Install updates from vendor's website.