Database/Kernel, userspace & hypervisor
Arm Mali GPU kernel driver: Use-after-free in the Bifrost/Valhall GPU kernel driver
CVE-2024-4610Kernel, userspace & hypervisorKnown exploitedcurated
Impact
Use-after-free in the Bifrost/Valhall GPU kernel driver - a local non-privileged user reaches freed kernel memory; exploited in the wild [KEV]
Who can reach it
Local user with GPU device access
What to do
Driver update + reboot. Not applicable to NVIDIA/AMD datacentre GPUs, but directly relevant to any Arm-based (Grace, Ampere Altra) node that ships a Mali display GPU, and it is the closest existing precedent for tenant-reachable GPU-driver privesc
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.