CVE-2023-26083 — Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
CVE-2023-26083: Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Arm |
| Product | Mali Graphics Processing Unit (GPU) |
| Date added | 2023-04-07 |
| Due date | 2023-04-28 |
| Ransomware campaign use | Unknown |
Description
Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2023-26083
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-26083
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog