CVE-2023-4211
Published 2023-10-01 · Updated 2026-06-17 · Source arm-security@arm.com
Summary
CVE-2023-4211 is a medium-severity (CVSS 5.5) vulnerability in Arm Mali GPU Kernel Driver. CISA added it to the Known Exploited Vulnerabilities catalog on October 3, 2023, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by October 24, 2023. CISA does not currently list it as used in ransomware campaigns. Arm has 9 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.
All 9 known-exploited Arm vulnerabilities →Description
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA Known-Exploited Vulnerability
Product: Arm — Mali GPU Kernel Driver
Name: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Date added: 2023-10-03 · Due: 2023-10-24
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.