CVE-2023-26083

Published: Apr 6, 2023Modified: Jun 17, 2026CISA KEV

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Affected (4)

Products: Arm: 5th Gen Gpu Architecture Kernel Driver, Bifrost Gpu Kernel Driver, Midgard Gpu Kernel Driver, Valhall Gpu Kernel Driver

Arm

4 products

5th Gen Gpu Architecture Kernel Driver

Bifrost Gpu Kernel Driver

Midgard Gpu Kernel Driver

Valhall Gpu Kernel Driver

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Arm 5th Gen Gpu Architecture Kernel Driver	From r41p0 to r43p0
Arm Bifrost Gpu Kernel Driver	From r0p0 to r43p0
Arm Midgard Gpu Kernel Driver	From r6p0 to r32p0
Arm Valhall Gpu Kernel Driver	From r19p0 to r43p0