CVE-2023-4272: Arm Bifrost GPU Kernel Driver

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

Affected products

• Arm Bifrost GPU Kernel Driver: from r0p0, up to and including r41p0
• Arm Mali GPU Kernel Driver: version r41p0 only
• Arm Midgard GPU Kernel Driver: from r8p0, up to and including r32p0
• Arm Valhall GPU Kernel Driver: from r19p0, up to and including r41p0

Published 2023-11-07. Last modified 2026-06-17.