Bug 1223185 (CVE-2024-1065) - VUL-0: CVE-2024-1065: kernel:Use After Free vulnerability in Midgard, Bifrost, Valhall GPU Kernel Drivers
Summary: VUL-0: CVE-2024-1065: kernel:Use After Free vulnerability in Midgard, Bifrost...
Status: RESOLVED INVALID
Alias: CVE-2024-1065
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Oscar Salvador
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/402721/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-04-22 07:50 UTC by SMASH SMASH
Modified: 2024-05-23 08:44 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-04-22 07:50:08 UTC 
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver  vulnerability in Arm Ltd Bifrost GPU Kernel Dallows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r45p0 through r48p0; Valhall GPU Kernel Driver: from r45p0 through r48p0; Arm 5th Gen GPU Architecture Kernel Driver: from r45p0 through r48p0.

References:
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-1065
https://www.cve.org/CVERecord?id=CVE-2024-1065
Comment 1 Thomas Leroy 2024-04-22 07:50:23 UTC 
As far as I remember, we don't ship those ARM drivers. Leaving open for confirmation from kernel folks
Comment 3 Ivan Ivanov 2024-05-09 12:03:40 UTC 
No idea about these drivers. Moving to HW enablement team.
Comment 4 Patrik Jakobsson 2024-05-10 06:45:40 UTC 
This is not something we've enabled in the HW Enablement team so if the ARM team knows nothing about it I would say we don't support it.
Comment 5 Thomas Leroy 2024-05-23 08:44:47 UTC 
Thanks everyone. Closing