boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-4211

Arm Ltd Midgard GPU Kernel Driver — Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  N  N    5.5   .0110   64.5   YES
AFFECTED
  Product                                      Versions  Fixed
  Midgard GPU Kernel Driver                    r12p0 –   —
  Bifrost GPU Kernel Driver                    r0p0 –    —
  Valhall GPU Kernel Driver                    r19p0 –   —
  Arm 5th Gen GPU Architecture Kernel  Driver  r41p0 –   —
TIMELINE
  Aug 7   Reserved by Arm
  Oct 1   Published (CNA: Arm)
  Oct 3   Added to CISA KEV, remediation due 2023-10-24
CWE-416 · CNA: Arm · CVSS v3.1 · 2 references · KEV due October 24, 2023

Description

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
August 7, 2023ReservedReserved by Arm
October 1, 2023PublishedPublished (CNA: Arm)
October 3, 2023KEV ADDEDAdded to CISA KEV, remediation due 2023-10-24

Affected

Affected products and packages — 4 rows
VendorProduct / PackageEcosystemVersion introducedFixed
Arm LtdMidgard GPU Kernel Driver—r12p0—
Arm LtdBifrost GPU Kernel Driver—r0p0—
Arm LtdValhall GPU Kernel Driver—r19p0—
Arm LtdArm 5th Gen GPU Architecture Kernel Driver—r41p0—

Weaknesses

CWE-416

References (2)

Related

Authoritative record: CVE-2023-4211 at cve.org

Vendors: arm

Weaknesses: CWE-416

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-4211 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.