Mali GPU Kernel Driver can cause the whole system to become unresponsive (Arm Ltd Bifrost GPU Kernel Driver)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.15 % · percentile 4 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Arm
- NVD status
- Analyzed
Description
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a non-privileged user process to make valid GPU memory processing operations, including via WebGL or WebGPU, to cause the whole system to become unresponsive.This issue affects Bifrost GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Valhall GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Arm 5th Gen GPU Architecture Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0.
Weaknesses (CWE)
- CWE-835 — Loop with Unreachable Exit Condition
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 4.0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | CISA-ADP |
| CVSS 3.1 | MEDIUM 6.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | MEDIUM 4.0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
European references
- ENISA EUVD · EUVD-2024-48019
- GCVE · GCVE-0-2024-6790
Affected configurations (NVD CPE)
cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*≥ r46p0 < r49p1cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*≥ r50p0 < r52p0cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:r44p1:*:*:*:*:*:*:*cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r46p0 < r49p1cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r50p0 ≤ r51p0cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r44p1:*:*:*:*:*:*:*cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r46p0 < r49p1cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r50p0 < r52p0cpe:2.3:a:arm:valhall_gpu_kernel_driver:r44p1:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Arm Ltd · Bifrost GPU Kernel Driver | affected r44p1 ; affected r46p0 ≤ r49p0 ; affected r50p0 ≤ r51p0 |
| Arm Ltd · Valhall GPU Kernel Driver | affected r44p1 ; affected r46p0 ≤ r49p0 ; affected r50p0 ≤ r51p0 |
| Arm Ltd · Arm 5th Gen GPU Architecture Kernel Driver | affected r44p1 ; affected r46p0 ≤ r49p0 ; affected r50p0 ≤ r51p0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |