CVE-2024-6790

MEDIUM EPSS 3.9%

Published Feb 3, 20251y ago · Modified Jun 17, 20262w ago

6.1 CVSS 3.1

Medium

Published Feb 3, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a non-privileged user process to make valid GPU memory processing operations, including via WebGL or WebGPU, to cause the whole system to become unresponsive.This issue affects Bifrost GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Valhall GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Arm 5th Gen GPU Architecture Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0.

CVSS Details

Base Score

6.1

Exploitability

1.8

Impact

4.2

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity Low

Availability High

Threat Intelligence

EPSS Exploit Probability

3.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-835

Affected Products 9

Vendor	Product	Version	Range
arm	5th_gen_gpu_architecture_kernel_driver	*	≥r46p0 – <r49p1
arm	5th_gen_gpu_architecture_kernel_driver	*	≥r50p0 – <r52p0
arm	5th_gen_gpu_architecture_kernel_driver	r44p1	any
arm	bifrost_gpu_kernel_driver	*	≥r46p0 – <r49p1
arm	bifrost_gpu_kernel_driver	*	≥r50p0 – ≤r51p0
arm	bifrost_gpu_kernel_driver	r44p1	any
arm	valhall_gpu_kernel_driver	*	≥r46p0 – <r49p1
arm	valhall_gpu_kernel_driver	*	≥r50p0 – <r52p0
arm	valhall_gpu_kernel_driver	r44p1	any

References 1

developer.arm.com https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.