EXECUTIVE SUMMARY
Arm has issued a warning about a security vulnerability in the Mali GPU Kernel Driver, identified as CVE-2024-4610, which has been actively exploited. This use-after-free issue affects the Bifrost GPU Kernel Driver (versions r34p0 to r40p0) and the Valhall GPU Kernel Driver (versions r34p0 to r40p0). According to the advisory, a local non-privileged user can improperly process GPU memory to access already freed memory. Arm has acknowledged reports of this vulnerability being exploited in real-world attacks but has withheld specific details to prevent further exploitation. This advisory follows the pattern of previous zero-day flaws in Arm Mali GPU being weaponized by commercial spyware vendors for targeted attacks on Android devices. Users are strongly advised to update their products to the appropriate version to mitigate potential threats.[/subscribe_to_unlock_form]
EXECUTIVE SUMMARY
Arm has issued a warning about a security vulnerability in the Mali GPU Kernel Driver, identified as CVE-2024-4610, which has been actively exploited. This use-after-free issue affects the Bifrost GPU Kernel Driver (versions r34p0 to r40p0) and the Valhall GPU Kernel Driver (versions r34p0 to r40p0). According to the advisory, a local non-privileged user can improperly process GPU memory to access already freed memory. Arm has acknowledged reports of this vulnerability being exploited in real-world attacks but has withheld specific details to prevent further exploitation. This advisory follows the pattern of previous zero-day flaws in Arm Mali GPU being weaponized by commercial spyware vendors for targeted attacks on Android devices. Users are strongly advised to update their products to the appropriate version to mitigate potential threats.[emaillocker id="1283"]
RECOMMENDATION:
REFERENCES:
The following reports contain further technical details:
https://thehackernews.com/2024/06/arm-warns-of-actively-exploited-zero.html
[/emaillocker]