CVE-2024-3655

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r43p0 through r49p0; Valhall GPU Kernel Driver: from r43p0 through r49p0; Arm 5th Gen GPU Architecture Kernel Driver: from r43p0 through r49p0.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver::::::::
	cpe:2.3:a:arm:bifrost_gpu_kernel_driver::::::::
	cpe:2.3:a:arm:valhall_gpu_kernel_driver::::::::

History

27 Mar 2025, 17:03

Type	Values Removed	Values Added
References	~~() https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities -~~	() https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities - Vendor Advisory
CPE		cpe:2.3:a:arm:valhall_gpu_kernel_driver:::::::: cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:::::::: cpe:2.3:a:arm:bifrost_gpu_kernel_driver::::::::
First Time		Arm 5th Gen Gpu Architecture Kernel Driver Arm Arm valhall Gpu Kernel Driver Arm bifrost Gpu Kernel Driver

Information

Published : 2024-09-03 10:15

Updated : 2025-03-27 17:03

NVD link : CVE-2024-3655

Mitre link : CVE-2024-3655

CVE.ORG link : CVE-2024-3655

JSON object : View

Products Affected

arm

valhall_gpu_kernel_driver
5th_gen_gpu_architecture_kernel_driver
bifrost_gpu_kernel_driver

CWE

CWE-416

Use After Free

{"id": "CVE-2024-3655", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-09-03T10:15:06.083", "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "tags": ["Vendor Advisory"], "source": "arm-security@arm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "arm-security@arm.com", "description": [{"lang": "en", "value": "CWE-416"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r43p0 through r49p0; Valhall GPU Kernel Driver: from r43p0 through r49p0; Arm 5th Gen GPU Architecture Kernel Driver: from r43p0 through r49p0."}, {"lang": "es", "value": "La vulnerabilidad Use After Free en el controlador del kernel de GPU Bifrost de Arm Ltd, el controlador del kernel de GPU Valhall de Arm Ltd y el controlador del kernel de arquitectura de GPU de quinta generaci\u00f3n de Arm Ltd permite que un usuario local sin privilegios realice operaciones de procesamiento de memoria de GPU incorrectas para obtener acceso a la memoria ya liberada. Este problema afecta al controlador del kernel de GPU Bifrost: desde r43p0 hasta r49p0; controlador del kernel de GPU Valhall: desde r43p0 hasta r49p0; controlador del kernel de arquitectura de GPU de quinta generaci\u00f3n de Arm: desde r43p0 hasta r49p0."}], "lastModified": "2025-03-27T17:03:07.937", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23B0F24F-ECAA-4696-AADC-70C9454DC05F", "versionEndExcluding": "r49p1", "versionStartIncluding": "r43p0"}, {"criteria": "cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A843887C-07BC-4D9D-A183-B5C43A1EF6F9", "versionEndExcluding": "r49p1", "versionStartIncluding": "r43p0"}, {"criteria": "cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48239542-60C8-4A7F-8DB6-388B8D258F94", "versionEndExcluding": "r49p1", "versionStartIncluding": "r43p0"}], "operator": "OR"}]}], "sourceIdentifier": "arm-security@arm.com"}