CVE-2023-33200: Arm Bifrost GPU Kernel Driver

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.

Affected products

• Arm Bifrost GPU Kernel Driver: from r17p0, before r44p1 (fixed in r44p1)
• Arm Mali GPU Kernel Driver: from r41p0, before r44p1 (fixed in r44p1)
• Arm Valhall GPU Kernel Driver: from r19p0, before r44p1 (fixed in r44p1)

Published 2023-10-03. Last modified 2026-06-17.