CVE-2023-4211
Medium 5.5 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Metrics
- CVSS 3.1
-
5.5 (MEDIUM)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 1% (percentile: 62) as of 2 November 2026
- CWE
- CWE-416
Affected products
arm: 5th gen gpu architecture kernel driver; arm: bifrost gpu kernel driver; arm: midgard gpu kernel driver; arm: valhall gpu kernel driver