CVE-2023-4272 - Vulnerability Details - OpenCVE

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00201.

Key SSVC decision points have not yet been added.

Vendors	Products
Arm	Bifrost Gpu Kernel Driver Mali Gpu Kernel Driver Midgard Gpu Kernel Driver Valhall Gpu Kernel Driver

Configuration 1 [-]

OR	cpe:2.3:a:arm:bifrost_gpu_kernel_driver::::::::
	cpe:2.3:a:arm:mali_gpu_kernel_driver:r41p0:::::::*
	cpe:2.3:a:arm:midgard_gpu_kernel_driver::::::::
	cpe:2.3:a:arm:valhall_gpu_kernel_driver::::::::

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2023-54143	A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

History

No history.

MITRE

Status: PUBLISHED

Assigner: Arm

Published: 2023-11-07T15:18:59.203Z

Updated: 2024-09-04T19:35:16.534Z

Reserved: 2023-08-09T12:41:30.877Z

Link: CVE-2023-4272

Vulnrichment

Updated: 2024-08-02T07:24:04.581Z

NVD

Status : Modified

Published: 2023-11-07T16:15:29.250

Modified: 2024-11-21T08:34:45.880

Link: CVE-2023-4272

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-4272", "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "state": "PUBLISHED", "assignerShortName": "Arm", "dateReserved": "2023-08-09T12:41:30.877Z", "datePublished": "2023-11-07T15:18:59.203Z", "dateUpdated": "2024-09-04T19:35:16.534Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Midgard GPU Kernel Driver", "vendor": "Arm Ltd", "versions": [{"lessThanOrEqual": "r32p0", "status": "affected", "version": "r8p0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Bifrost GPU Kernel Driver", "vendor": "Arm Ltd", "versions": [{"changes": [{"at": "r42p0", "status": "unaffected"}], "lessThan": "r42p0", "status": "affected", "version": "r0p0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Valhall GPU Kernel Driver", "vendor": "Arm Ltd", "versions": [{"changes": [{"at": "r42p0", "status": "unaffected"}], "lessThan": "r42p0", "status": "affected", "version": "r19p0", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Arm 5th Gen GPU Architecture Kernel Driver", "vendor": "Arm Ltd", "versions": [{"changes": [{"at": "r42p0", "status": "unaffected"}], "lessThan": "r42p0", "status": "affected", "version": "r41p0", "versionType": "patch"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Jann Horn at Google"}], "datePublic": "2023-11-07T11:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. </p>"}], "value": "A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. \n\n"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1251", "description": "CWE-1251 Mirrored Regions with Different Values", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "shortName": "Arm", "dateUpdated": "2023-11-14T22:37:50.042Z"}, "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"}], "source": {"discovery": "EXTERNAL"}, "title": "Mali GPU Kernel Driver exposes sensitive data from freed memory", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "arm-security@arm.com", "ID": "CVE-2023-4272", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Mali GPU Kernel Driver", "version": {"version_data": [{"version_value": "Midgard GPU Kernel Driver"}]}}]}, "vendor_name": "Arm Ltd"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "5.0", "description": {"description_data": [{"lang": "eng", "value": "A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Mali GPU Kernel Driver exposes sensitive data from freed memory"}]}]}, "references": {"reference_data": [{"name": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "refsource": "MISC", "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T07:24:04.581Z"}, "title": "CVE Program Container", "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "tags": ["x_transferred"]}]}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-04T19:32:51.694412Z", "id": "CVE-2023-4272", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-04T19:35:16.534Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T07:24:04.581Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-4272", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-04T19:32:51.694412Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-04T19:34:18.640Z"}}], "cna": {"title": "Mali GPU Kernel Driver exposes sensitive data from freed memory", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Jann Horn at Google"}], "affected": [{"vendor": "Arm Ltd", "product": "Midgard GPU Kernel Driver", "versions": [{"status": "affected", "version": "r8p0", "versionType": "patch", "lessThanOrEqual": "r32p0"}], "defaultStatus": "unaffected"}, {"vendor": "Arm Ltd", "product": "Bifrost GPU Kernel Driver", "versions": [{"status": "affected", "changes": [{"at": "r42p0", "status": "unaffected"}], "version": "r0p0", "lessThan": "r42p0", "versionType": "patch"}], "defaultStatus": "unaffected"}, {"vendor": "Arm Ltd", "product": "Valhall GPU Kernel Driver", "versions": [{"status": "affected", "changes": [{"at": "r42p0", "status": "unaffected"}], "version": "r19p0", "lessThan": "r42p0", "versionType": "patch"}], "defaultStatus": "unaffected"}, {"vendor": "Arm Ltd", "product": "Arm 5th Gen GPU Architecture Kernel Driver", "versions": [{"status": "affected", "changes": [{"at": "r42p0", "status": "unaffected"}], "version": "r41p0", "lessThan": "r42p0", "versionType": "patch"}], "defaultStatus": "unaffected"}], "datePublic": "2023-11-07T11:00:00.000Z", "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. \n\n", "supportingMedia": [{"type": "text/html", "value": "<p>A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. </p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1251", "description": "CWE-1251 Mirrored Regions with Different Values"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "shortName": "Arm", "dateUpdated": "2023-11-14T22:37:50.042Z"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "Midgard GPU Kernel Driver"}]}, "product_name": "Mali GPU Kernel Driver"}]}, "vendor_name": "Arm Ltd"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "name": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Mali GPU Kernel Driver exposes sensitive data from freed memory"}]}]}, "data_version": "5.0", "CVE_data_meta": {"ID": "CVE-2023-4272", "STATE": "PUBLIC", "ASSIGNER": "arm-security@arm.com"}}}}, "cveMetadata": {"cveId": "CVE-2023-4272", "state": "PUBLISHED", "dateUpdated": "2024-09-04T19:35:16.534Z", "dateReserved": "2023-08-09T12:41:30.877Z", "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "datePublished": "2023-11-07T15:18:59.203Z", "assignerShortName": "Arm"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "711E2235-8C0F-4B8F-858F-E2EAAC124FA1", "versionEndIncluding": "r41p0", "versionStartIncluding": "r0p0", "vulnerable": true}, {"criteria": "cpe:2.3:a:arm:mali_gpu_kernel_driver:r41p0:*:*:*:*:*:*:*", "matchCriteriaId": "4B4EFDF6-BB81-48DF-BCC9-C22657E572AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B466A44-0367-4F71-ABF0-CB031338B7E6", "versionEndIncluding": "r32p0", "versionStartIncluding": "r8p0", "vulnerable": true}, {"criteria": "cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "2429D309-6700-447D-A068-F6F02DC6473B", "versionEndIncluding": "r41p0", "versionStartIncluding": "r19p0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. \n\n"}, {"lang": "es", "value": "Un usuario local sin privilegios puede realizar operaciones de procesamiento de GPU que expongan datos confidenciales de la memoria previamente liberada."}], "id": "CVE-2023-4272", "lastModified": "2024-11-21T08:34:45.880", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-11-07T16:15:29.250", "references": [{"source": "arm-security@arm.com", "tags": ["Vendor Advisory"], "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"}], "sourceIdentifier": "arm-security@arm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-1251"}], "source": "arm-security@arm.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}