Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 6, 2023 · Catalog

   Detected

   Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

2. Apr 7, 2023 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 28, 2023 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Affected

• cpe arm/5th gen gpu architecture kernel driverversion unspecified
• cpe arm/bifrost gpu kernel driverversion unspecified
• cpe arm/midgard gpu kernel driverversion unspecified
• cpe arm/valhall gpu kernel driverversion unspecified
• vendor Arm Mali Graphics Processing Unit (GPU)version unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2023-26083

  Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

  cisa.gov
• CVE.orgVulnerability recordCVE-2023-26083

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2023-26083

  30-day exploitation probability 1.2%

  first.org
• NIST NVDVulnerability recordCVE-2023-26083

  Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41

  nvd.nist.gov

References

• CISA note · developer.arm.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov
• Third Party Advisory · cybersecurity-help.cz
• Third Party Advisory · cybersecurity-help.cz