https://pwn.watch/t/arm Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Wed, 12 Jun 2024 00:00:00 GMT https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2024-4610 https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2024-4610 Wed, 12 Jun 2024 00:00:00 GMT high <p>Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. Added to the CISA KEV catalog on 2024-06-12.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-06-12: CISA added CVE-2024-4610 to the KEV catalog (federal deadline 2024-07-03) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li><li>2024-06-07: CVE-2024-4610 published (<a href="https://nvd.nist.gov/vuln/detail/CVE-2024-4610">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2024-4610</p> https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2023-4211 https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2023-4211 Tue, 03 Oct 2023 00:00:00 GMT medium <p>Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. Added to CISA KEV on 2023-10-03.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2023-10-03: CISA added CVE-2023-4211 to the KEV catalog (due 2023-10-24).</li></ul> <p><strong>CVEs:</strong> CVE-2023-4211</p> https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2023-26083 https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2023-26083 Fri, 07 Apr 2023 00:00:00 GMT low <p>Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. Added to CISA KEV on 2023-04-07.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2023-04-07: CISA added CVE-2023-26083 to the KEV catalog (due 2023-04-28).</li></ul> <p><strong>CVEs:</strong> CVE-2023-26083</p> https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181 https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181 Thu, 30 Mar 2023 00:00:00 GMT high <p>Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages. Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. Added to CISA KEV on 2023-03-30.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2023-03-30: CISA added CVE-2022-22706 to the KEV catalog (due 2023-04-20).</li><li>2023-03-30: CISA added CVE-2022-38181 to the KEV catalog (due 2023-04-20).</li></ul> <p><strong>CVEs:</strong> CVE-2022-22706, CVE-2022-38181</p>