ZeroDay Findings
Sign inSign up

Findings

CVE-2024-4610

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Published Jun 7, 2024 · updated Jun 17, 2026 · arm bifrost gpu kernel driver

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 7, 2024 · Catalog

    Detected

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.

  2. Jun 12, 2024 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Jul 3, 2024 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 17, 2026 · Catalog

    Updated

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Jul 3, 2024

Affected

  • cpe arm/bifrost gpu kernel driverversion unspecified
  • cpe arm/valhall gpu kernel driverversion unspecified
  • vendor Arm Mali GPU Kernel Driverversion unspecified

Sources

  • CISA KEVCVE-2024-4610

    Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

    cisa.gov
  • CVE.orgCVE-2024-4610

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-4610

    30-day exploitation probability 0.8%

    first.org
  • NIST NVDCVE-2024-4610

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p

    nvd.nist.gov

References