Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r45p0 through r48p0; Valhall GPU Kernel Driver: from r45p0 through r48p0; Arm 5th Gen GPU Architecture Kernel Driver: from r45p0 through r48p0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Exploiting Mali GPU use-after-free for privilege escalation (CVE-2024-1065) with a page-cache technique (@kuzeyardabulut) https://kuzey.rs/posts/MaliUAF/ #infosec https://t.co/EcVydHIeJB
Post summary
The tweet highlights a privilege‑escalation exploit for CVE‑2024‑1065, describing a page‑cache use‑after‑free technique and pointing to a blog post with further technical details.
🐛New post: Exploiting CVE-2024-1065 via the Page Cache! A strategy for physical-page UAFs in MIGRATE_MOVABLE, where Dirty Pagetable and Dirty Cred don't apply. Demonstrated on the Mali GPU UAF found by Project Zero. https://kuzey.rs/posts/MaliUAF/ #ExploitDevelopment #KernelSecurity
Post summary
The post presents a proof‑of‑concept exploit for CVE‑2024‑1065 targeting a Mali GPU UAF via the page cache, with a linked write‑up detailing the technique.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | arm | 5th_gen_gpu_architecture_kernel_driver | - | - | - |
| App | arm | bifrost_gpu_kernel_driver | - | - | - |
| App | arm | valhall_gpu_kernel_driver | - | - | - |