CVEvulnerability

CVE-2023-26083

3.3 LOW Known exploited Published 2023-04-06 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Arm Mali GPU Kernel Driver Information Disclosure Vulnerability — Arm Mali Graphics Processing Unit (GPU)

Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Added to KEV: 2023-04-07
Remediation due: 2023-04-28
Ransomware use: Unknown
Required action: Apply updates per vendor instructions.
Notes: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2023-26083

Status: Analyzed
Published: 2023-04-06
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses: CWE-401

Description

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Affected configurations

• arm 5th gen gpu architecture kernel driver (>= r41p0 < r43p0) • arm bifrost gpu kernel driver (>= r0p0 < r43p0) • arm midgard gpu kernel driver (>= r6p0 <= r32p0) • arm valhall gpu kernel driver (>= r19p0 < r43p0)

Weakness · CWE (1)

CWE-401 Missing Release of Memory after Effective Lifetime weakness

References