CVE-2024-4610
hw:arm: Mali GPU Kernel Driver allows improper GPU memory processing operations
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 7, 2024
Updated · November 21, 2025
Description
A use-after-free vulnerability was found in the Arm Ltd Bifrost GPU kernel driver. The Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. This issue affects the Bifrost GPU Kernel Driver from r34p0 through r40p0 and the Valhall GPU Kernel Driver from r34p0 through r40p0.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 · Use After Free