CVE-2023-4211

Timeline

Detection, updates, and resolution for this record.

1. Oct 1, 2023 · Catalog

   Detected

   Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

2. Oct 3, 2023 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Oct 24, 2023 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Jun 16, 2026 · Catalog

   Updated

   Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

Affected

• cpe arm/5th gen gpu architecture kernel driverversion unspecified
• cpe arm/bifrost gpu kernel driverversion unspecified
• cpe arm/midgard gpu kernel driverversion unspecified
• cpe arm/valhall gpu kernel driverversion unspecified
• vendor Arm Mali GPU Kernel Driverversion unspecified

Sources

• CISA KEVCVE-2023-4211

  Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

  cisa.gov
• CVE.orgCVE-2023-4211

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2023-4211

  30-day exploitation probability 1.1%

  first.org
• NIST NVDCVE-2023-4211

  A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

  nvd.nist.gov

References

• CISA note · developer.arm.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov