Semiconductor and software design company Arm warns of an actively exploited zero-day vulnerability tracked as CVE-2024-4610, in Mali GPU Kernel Driver.
The vulnerability is a use-after-free issue that impacts Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) and Valhall GPU Kernel Driver (all versions from r34p0 to r40p0).
According to the advisory published by the company, a local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. Arm is aware of reports of this vulnerability being exploited in the wild.
Bifrost and Valhall GPU Kernel Driver r41p0, which were released on November 24, 2022, address the vulnerability.
The company recommends users to upgrade if this issue impacts them.
Comments