CVE-2023-26083 — Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
CVE-2023-26083: Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Arm |
| Product | Mali Graphics Processing Unit (GPU) |
| Date added | 2023-04-07 |
| Due date | 2023-04-28 |
| Ransomware campaign use | Unknown |
Description
Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2023-26083
Weakness behind it
CISA records this vulnerability as an instance of CWE-401. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-26083
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
See all 1,745 pages under Vulnerabilities (CVE) →
Related pages
Browse by topic
Every page in the corpus, grouped. Search finds one page; this shows what else is here.