CVE-2023-26083

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions r6p0 through r32p0 Arm Mali GPU Kernel Driver versions r0p0 through r42p0 Arm Mali GPU Kernel Driver versions r19p0 through r42p0 Arm Mali GPU Kernel Driver versions r41p0 through r42p0

Description A memory leak vulnerability in the Mali GPU Kernel Driver allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. This issue has been found exploited in the wild, affecting Arm devices.

Recommendations For Arm Mali GPU Kernel Driver versions r6p0 through r32p0, consider restricting access to the GPU processing operations until a patch is available. For Arm Mali GPU Kernel Driver versions r0p0 through r42p0, consider disabling the vulnerable kernel driver functionality as a temporary workaround. For Arm Mali GPU Kernel Driver versions r19p0 through r42p0, restrict the use of the kernel driver to minimize the risk of exploitation. For Arm Mali GPU Kernel Driver versions r41p0 through r42p0, avoid using the sensitive kernel metadata in the affected GPU processing operations until the issue is resolved.