PT-2024-27068

CVE-2024-3655

·

Published

2024-09-03

·

Updated

2024-09-07

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Arm Ltd Bifrost GPU Kernel Driver versions r43p0 through r49p0 Arm Ltd Valhall GPU Kernel Driver versions r43p0 through r49p0 Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r43p0 through r49p0
Description The issue allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. This is a result of a Use After Free vulnerability in the affected drivers.
Recommendations For Arm Ltd Bifrost GPU Kernel Driver versions r43p0 through r49p0, upgrade the driver immediately to mitigate the risk. For Arm Ltd Valhall GPU Kernel Driver versions r43p0 through r49p0, upgrade the driver immediately to mitigate the risk. For Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r43p0 through r49p0, upgrade the driver immediately to mitigate the risk.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ASB-A-346629290
Found an issue in the description? Have something to add? Feel free to write us 👾