CVE-2023-26083
arm 5th gen gpu architecture kernel driver, arm bifrost gpu kernel driver, arm midgard gpu kernel driver
Published 6 Apr 2023 · updated 17 Jun 2026 · Analyzed
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 7 Apr 2023, with a remediation deadline of 28 Apr 2023 for US federal agencies.
Required action: Apply updates per vendor instructions.
Description
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
References
- developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
- www.cybersecurity-help.cz/vdb/SB2023033049 · Third Party Advisory
- www.cybersecurity-help.cz/vulnerabilities/74210/ · Third Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26083 · US Government Resource