发布日期：2023-12-04
更新日期：2024-01-02

受影响系统：

ARM Arm Mali GPU Kernel Driver Midgard >= r0p0
ARM Arm Mali GPU Kernel Driver Midgard <= r32p0
ARM Arm Mali GPU Kernel Driver Bifrost >= r0p0
ARM Arm Mali GPU Kernel Driver Bifrost <= r44p0
ARM Arm Mali GPU Kernel Driver Valhall >= r19p0
ARM Arm Mali GPU Kernel Driver Valhall <= r44p0
ARM ARM Mali GPU Kernel Driver 5th Gen >= r41p0
ARM ARM Mali GPU Kernel Driver 5th Gen <= r44p0

描述：

---

CVE(CAN) ID: CVE-2023-32804

ARM Mali GPU Kernel Driver是英国ARM公司的一个图形处理器单元的驱动程序。
ARM Mali GPU Kernel Driver多个版本存在越界写入漏洞，攻击者可利用该漏洞向用户空间驱动程序未分配的有限内存写入恒定模式。

<*链接：https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
*>

建议：

---

厂商补丁：

ARM
---
ARM已经为此发布了一个安全公告（CVE-2023-32804）以及相应补丁:
CVE-2023-32804：Mali GPU Userspace Driver can make an Out-of-Bounds access
链接：https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

浏览次数：430
严重程度：0（网友投票）