Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-26083

Published: 06/04/2023 Updated: 21/04/2023
CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Arm

Vulnerability Summary

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

arm midgard

arm bifrost gpu kernel driver

arm valhall gpu kernel driver

arm avalon gpu kernel driver

Vendor Advisories

Google Chrome: Long Term Support Channel Update for ChromeOS
LTS-108 is being updated in the LTS channel to 10805359230 (Platform Version: 15183930) for most ChromeOS devices Want to know more about Long Term Support? Click hereThis update contains multiple Security fixes, including:1421268 High  CVE-2023-1532 Out of bounds read in GPU Video1420510 High&nbs ...

Github Repositories

https://github.com/0x36/Pixel_GPU_Exploit

A kernel exploit for Pixel7/8 Pro with Android 14

Mali GPU Kernel LPE This article provides an in-depth analysis of two kernel vulnerabilities within the Mali GPU, reachable from the default application sandbox, which I independently identified and reported to Google It includes a kernel exploit that achieves arbitrary kernel r/w capabilities Consequently, it disables SELinux and elevates privileges to root on Google Pixel 7

References

CWE-401https://www.cybersecurity-help.cz/vulnerabilities/74210/https://www.cybersecurity-help.cz/vdb/SB2023033049https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilitieshttps://nvd.nist.govhttps://github.com/0x36/Pixel_GPU_Exploithttps://chromereleases.googleblog.com/2023/04/long-term-support-channel-update-for_27.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook