Mali GPU Kernel Driver can cause the whole system to become unresponsive (Arm Ltd Bifrost GPU Kernel Driver)
En bref
- Source
- NVD
- EPSS
- EPSS 0.15 % · centile 4 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Arm
- Statut NVD
- Analyzed
Description
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a non-privileged user process to make valid GPU memory processing operations, including via WebGL or WebGPU, to cause the whole system to become unresponsive.This issue affects Bifrost GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Valhall GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Arm 5th Gen GPU Architecture Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0.
Faiblesses (CWE)
- CWE-835 — Boucle dont la condition de sortie est inatteignable (boucle infinie)
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 4.0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | CISA-ADP |
| CVSS 3.1 | MEDIUM 6.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | MEDIUM 4.0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2024-48019
- GCVE · GCVE-0-2024-6790
Configurations affectées (CPE NVD)
cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*≥ r46p0 < r49p1cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*≥ r50p0 < r52p0cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:r44p1:*:*:*:*:*:*:*cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r46p0 < r49p1cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r50p0 ≤ r51p0cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r44p1:*:*:*:*:*:*:*cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r46p0 < r49p1cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r50p0 < r52p0cpe:2.3:a:arm:valhall_gpu_kernel_driver:r44p1:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Arm Ltd · Bifrost GPU Kernel Driver | affected r44p1 ; affected r46p0 ≤ r49p0 ; affected r50p0 ≤ r51p0 |
| Arm Ltd · Valhall GPU Kernel Driver | affected r44p1 ; affected r46p0 ≤ r49p0 ; affected r50p0 ≤ r51p0 |
| Arm Ltd · Arm 5th Gen GPU Architecture Kernel Driver | affected r44p1 ; affected r46p0 ≤ r49p0 ; affected r50p0 ≤ r51p0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |