CVE-2023-5427: arm 5th gen gpu architecture kernel driver +2…

csirt@kutim:~/threat-intel/cve/CVE-2023-5427

CVSS 7.8 · High EPSS 0,33%

Kerentanan Use After Free pada arm 5th gen gpu architecture kernel driver, arm bifrost gpu kernel driver +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r44p0 through r45p0; Valhall GPU Kernel Driver: from r44p0 through r45p0; Arm 5th Gen GPU Architecture Kernel Driver: from r44p0 through r45p0.

Rincian

Terbit di NVD: 1 Desember 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-416: Use After Free
EPSS (30 hari): 0,33% peluang dieksploitasi; lebih tinggi dari 25,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
arm	5th gen gpu architecture kernel driver	Versi r44p0 hingga sebelum r46p0
arm	bifrost gpu kernel driver	Versi r44p0 hingga sebelum r46p0
arm	valhall gpu kernel driver	Versi r44p0 hingga sebelum r46p0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities advisory vendor
http://packetstormsecurity.com/files/176029/ARM-Mali-r44p0-Use-After-Free.html exploit · advisory pihak ketiga · vdb entry

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.