{"id":"CVE-2023-26083","kind":"vulnerability","aliases":["CVE-2023-26083"],"related":[],"title":"Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0,…","description":"Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.","summary":"An Arm Mali GPU kernel driver flaw lets a non-privileged local user run valid GPU operations that expose sensitive kernel metadata. CISA lists it as actively exploited in the wild.","severity":"low","cvss":3.3,"epss":null,"exploited":true,"exploited_at":"2023-04-07T00:00:00+00:00","products":[{"name":"Arm Mali Graphics Processing Unit (GPU)","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"arm 5th gen gpu architecture kernel driver","fixed":["r43p0"],"affected":">= r41p0, < r43p0","ecosystem":"vendor"},{"name":"arm bifrost gpu kernel driver","fixed":["r43p0"],"affected":">= r0p0, < r43p0","ecosystem":"vendor"},{"name":"arm midgard gpu kernel driver","fixed":[],"affected":">= r6p0, <= r32p0","ecosystem":"vendor"},{"name":"arm valhall gpu kernel driver","fixed":["r43p0"],"affected":">= r19p0, < r43p0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","arm-mali","embedded","exploited","infrastructure","linux"],"not_affected_if":["no-mali-gpu-driver"],"how_to_check":null,"fix":"Apply the updated Mali GPU kernel driver from Arm per vendor instructions; the affected and fixed versions are not stated in the sources.","status":"open","published_at":"2023-04-06T16:15:07+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:08:25+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:08:25Z","model":"claude-haiku-5-5","output":{"fix":"Apply the updated Mali GPU kernel driver from Arm per vendor instructions; the affected and fixed versions are not stated in the sources.","reach":"local","impact":"low","summary":"An Arm Mali GPU kernel driver flaw lets a non-privileged local user run valid GPU operations that expose sensitive kernel metadata. CISA lists it as actively exploited in the wild.","category":"infrastructure","who_cares":["android","arm-mali","linux","embedded"],"confidence":0.6,"needs_auth":"yes","worst_case":"local unprivileged user reads sensitive kernel memory metadata","analyst_note":"Find affected and fixed Mali driver versions and the Arm security bulletin for CVE-2023-26083, and check whether Android device vendors have shipped patches.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-mali-gpu-driver"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000463,"input_tokens":2834,"output_tokens":359,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':20A,23A '-26083':21A,24A '5th':32A 'activ':88B 'allow':139C 'android':53B 'architecture':35A 'arm':25A,31A,38A,43A,48A,55B,62B 'arm-mali':54B 'avalon':130C 'bifrost':39A,111C 'cisa':84B 'cve':19A,22A 'driver':8A,13A,37A,42A,47A,52A,66B,100C,105C,114C,123C,133C 'embed':57B 'exploit':58B,89B 'expos':80B,152C 'flaw':67B 'gen':33A 'gpu':6A,11A,30A,34A,40A,45A,50A,64B,77B,98C,103C,112C,121C,131C,148C 'graphics':27A 'infrastructur':59B 'kernel':7A,12A,36A,41A,46A,51A,65B,82B,99C,104C,113C,122C,132C,154C 'leak':2A,94C 'let':68B 'linux':60B 'list':85B 'local':73B 'make':146C 'mali':5A,26A,56B,63B,97C 'memori':1A,93C 'metadata':83B,155C 'midgard':10A,44A,102C 'non':71B,142C 'non-privileg':70B,141C 'oper':78B,150C 'privileg':72B,143C 'process':149C 'processing':28A 'r0p0':118C 'r19p0':127C 'r32p0':18A,110C 'r41p0':137C 'r42p0':119C,128C,138C 'r6p0':17A,109C 'run':75B 'sensit':81B,153C 'unit':29A 'user':74B,144C 'valhal':120C 'valhall':49A 'valid':76B,147C 'version':15A,107C,116C,125C,135C 'vulner':3A,95C 'wild':92B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-04-06T16:15:07+00:00","kev":{"dateAdded":"2023-04-07","dueDate":"2023-04-28","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-26083","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26083","severity":null,"published_at":"2023-04-07T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T17:39:57+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-26083","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26083","severity":null,"published_at":"2023-04-06T16:15:07+00:00","modified_at":"2026-06-17T05:42:38+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}