CVE-2024-1067

arm 5th gen gpu architecture kernel driver, arm bifrost gpu kernel driver, arm valhall gpu kernel driver

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-1067

Katalog CVE

CVSS 7.4 · High EPSS 0,16%

Kerentanan Use After Free pada arm 5th gen gpu architecture kernel driver, arm bifrost gpu kernel driver +1 lainnya. Skor CVSS 3.1 7.4 (High) menurut CISA ADP.

Deskripsi (NVD)

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. On Armv8.0 cores, there are certain combinations of the Linux Kernel and Mali GPU kernel driver configurations that would allow the GPU operations to affect the userspace memory of other processes. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r47p0; Valhall GPU Kernel Driver: from r41p0 through r47p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r47p0.

Rincian

Terbit di NVD
3 Mei 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.4 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-416: Use After Free
EPSS (30 hari)
0,16% peluang dieksploitasi; lebih tinggi dari 4,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
arm 5th gen gpu architecture kernel driver Versi r41p0 hingga sebelum r48p0
arm bifrost gpu kernel driver Versi r41p0 hingga sebelum r48p0
arm valhall gpu kernel driver Versi r41p0 hingga sebelum r48p0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.