Live › vulnerability › CVE-2023-26083
Go to dashboardAn Arm Mali GPU kernel driver flaw lets a non-privileged local user run valid GPU operations that expose sensitive kernel metadata. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Arm Mali Graphics Processing Unit (GPU) | vendor | – | – |
| arm 5th gen gpu architecture kernel driver | vendor | >= r41p0, < r43p0 | r43p0 |
| arm bifrost gpu kernel driver | vendor | >= r0p0, < r43p0 | r43p0 |
| arm midgard gpu kernel driver | vendor | >= r6p0, <= r32p0 | – |
| arm valhall gpu kernel driver | vendor | >= r19p0, < r43p0 | r43p0 |
Unknown from the sources.
Apply the updated Mali GPU kernel driver from Arm per vendor instructions; the affected and fixed versions are not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
This page as .md · .json · in your agent: get_signal("CVE-2023-26083")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.