CVE-2023-6241
Published: 04 March 2024
Summary
CVE-2023-6241 is a high-severity Use After Free (CWE-416) vulnerability in Arm Valhall Gpu Kernel Driver. Its CVSS base score is 7.0 (High).
Operationally, ranked in the top 5.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-6241 is a use-after-free vulnerability caused by a software race condition in the Arm Mali GPU kernel drivers. It affects the Midgard GPU Kernel Driver from r13p0 through r32p0, the Bifrost GPU Kernel Driver from r11p0 through r25p0, the Valhall GPU Kernel Driver from r19p0 through r25p0 and r29p0 through r46p0, and the Arm 5th Gen GPU Architecture Kernel Driver from r41p0 through r46p0. The flaw permits improper memory processing operations when an attacker carefully prepares system memory.
A local non-privileged user can trigger the race condition to induce the use-after-free. Successful exploitation yields high impact on confidentiality, integrity, and availability, reflected in the CVSS 7.0 score that requires local access and high attack complexity.
Arm has published mitigation guidance and driver updates addressing the issue in its Mali GPU Driver Vulnerabilities advisory, available at the referenced developer.arm.com URLs. The associated EPSS score has remained essentially flat near 0.12 with no material post-disclosure increase.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-58487
Vulnerability details
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a…
more
software race condition to perform improper memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Midgard GPU Kernel Driver: from r13p0 through r32p0; Bifrost GPU Kernel Driver: from r11p0 through r25p0; Valhall GPU Kernel Driver: from r19p0 through r25p0, from r29p0 through r46p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r46p0.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Use-after-free exploits that achieve arbitrary code execution are blocked or significantly hardened by non-executable pages and ASLR.