CVE-2023-4211: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2023-10-03. EPSS: 1.1% chance of exploitation in the next 30 days.

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Affected products

• Arm 5th Gen GPU Architecture Kernel Driver: from r41p0, before r43p0 (fixed in r43p0)
• Arm Bifrost GPU Kernel Driver: from r0p0, before r43p0 (fixed in r43p0)
• Arm Midgard GPU Kernel Driver: from r12p0, up to and including r32p0
• Arm Valhall GPU Kernel Driver: from r19p0, before r43p0 (fixed in r43p0)

Published 2023-10-01. Last modified 2026-06-17.