CVE-2024-1065

MEDIUM

Arm 5th Gen GPU Architecture Kernel Driver r45p0-r48p0 - Use-After-Free

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-1065. PoCs published by kuzeyardabulut.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-1065, demonstrating a use-after-free vulnerability in the ARM Mali GPU kernel driver. The exploit achieves local privilege escalation by corrupting the page cache of a SUID binary to execute arbitrary shellcode as root.

Description

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r45p0 through r48p0; Valhall GPU Kernel Driver: from r45p0 through r48p0; Arm 5th Gen GPU Architecture Kernel Driver: from r45p0 through r48p0.

Exploits (1)

github WORKING POC
by kuzeyardabulut · cpoc
https://github.com/kuzeyardabulut/CVE-2024-1065

This repository contains a functional exploit for CVE-2024-1065, demonstrating a use-after-free vulnerability in the ARM Mali GPU kernel driver. The exploit achieves local privilege escalation by corrupting the page cache of a SUID binary to execute arbitrary shellcode as root.

Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Complex
Reliability
Racy
Target: ARM Mali GPU kernel driver (r48) on Linux kernel 5.15
No auth needed
Prerequisites: x86-64 architecture · Linux kernel 5.15 with specific Mali driver configuration · Access to /dev/mali0 · SUID binary (e.g., /usr/bin/passwd)
mistral-large-3 · analyzed Jun 11, 2026 Full analysis →

Scores

CVSS v3 5.9
EPSS 0.0021
EPSS Percentile 11.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (3)
arm/5th_gen_gpu_architecture_kernel_driver r45p0 - r49p0
arm/bifrost_gpu_kernel_driver r45p0 - r49p0
arm/valhall_gpu_kernel_driver r45p0 - r49p0
Published Apr 19, 2024
Tracked Since Feb 18, 2026