Arm Product Security Update Advisory (CVE-2024-2937, CVE-2024-4607) - SharITSec

Overview
 

Arm Developer(https://developer.arm.com/ ) has released an update to address a vulnerability in their product. Users of affected versions are advised to update to the latest version.

Affected Products

 

CVE-2024-2937, CVE-2024-4607

• Bifrost GPU kernel driver versions : r41p0 (inclusive) ~ r49p0 (inclusive)
• Valhall GPU Kernel Driver versions: r41p0 (inclusive) ~ r49p0 (inclusive)
• Arm 5th Generation GPU Architecture Kernel Driver versions: r41p0 (inclusive) ~ r49p0 (inclusive)

   

 

Resolved Vulnerabilities

Vulnerability that allows an unprivileged local user to access memory that has already been freed by performing improper GPU memory handling operations (CVE-2024-2937, CVE-2024-4607)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

CVE-2024-2937, CVE-2024-4607

 

• Bifrost GPU kernel driver: r50p0
• Valhall GPU kernel driver: r50p0
• Arm 5th Generation GPU Architecture Kernel Driver: r50p0

   

Referenced Sites

[1] Mali GPU Driver Vulnerabilities

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

Article Link: Arm Product Security Update Advisory (CVE-2024-2937, CVE-2024-4607) – ASEC

1 post - 1 participant

Read full topic

Malware Analysis, News and Indicators - Latest topics