CVE-2024-4610
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CVSS
—
No CVSS
EPSS
0.8%
p54
KEV
YES
Jun 12, 2024
Exploit Today
66
0-100
Published: — · Last modified: —
Product
Arm / Mali GPU Kernel Driver
Vulnerability
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Added to KEV
Jun 12, 2024
Remediate by
Jul 3, 2024
Known ransomware use
No
Summary description
Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2024-4610