CVE-2023-34970: Arm Mali GPU Kernel Driver

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory

Affected products

  • Arm Mali GPU Kernel Driver: version r44p0 only
  • Arm Valhall GPU Kernel Driver: version r44p0 only

Published 2023-10-03. Last modified 2026-06-17.