CVE-2023-26083 Arm Mali GPU Kernel Driver Information Disclosure

Exploited in the wild Low 3.3 Published 6 Apr 2023 Updated 21 Oct 2025

A non-privileged user can expose sensitive kernel metadata via valid GPU operations in the Mali GPU Kernel Driver on Android.

Exploited in the wild: Since 7 Apr 2023
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2023-26083?

CVE-2023-26083 is a low-severity vulnerability in Arm Valhall Gpu Kernel Driver, published on 6 Apr 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Weakness: CWE-401

Which versions are affected by CVE-2023-26083?

It affects 4 products.

Products include Arm 5th Gen Gpu Architecture Kernel Driver, Arm Bifrost Gpu Kernel Driver, Arm Midgard Gpu Kernel Driver, Arm Valhall Gpu Kernel Driver.

How do I fix CVE-2023-26083?

Apply the vendor's patch. US federal agencies must fix it by 28 Apr 2023.

Is CVE-2023-26083 being exploited?

Yes. Attackers have exploited CVE-2023-26083 in the wild since at least 7 Apr 2023.

Public exploit code: 1 proofs of concept on GitHub.

All Arm Valhall Gpu Kernel Driver vulnerabilities

Sources

Also known as A-272073598, ASB-A-272073598, GHSA-xfv3-jp8h-q7v6.