Vulnerability in Arm 5th Gen Gpu Architecture Kernel Driver
CVE-2024-6790
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a non-privileged user process to make valid GPU memory processing operations, including via WebGL or WebGPU, to cause the whole system to become unresponsive.This issue affects Bifrost GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Valhall GPU Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0; Arm 5th Gen GPU Architecture Kernel Driver: r44p1, from r46p0 through r49p0, from r50p0 through r51p0.
EPSS: 0.001 (4.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H.
Affected products
- Arm 5th_gen_gpu_architecture_kernel_driver — versions r44p1
- Arm Bifrost_gpu_kernel_driver — versions r44p1
- Arm Valhall_gpu_kernel_driver — versions r44p1
- Arm Ltd 5th Gen Gpu Architecture Kernel Driver — versions r44p1, r46p0, r50p0
- Arm Ltd Bifrost Gpu Kernel Driver — versions r44p1, r46p0, r50p0
- Arm Ltd Valhall Gpu Kernel Driver — versions r44p1, r46p0, r50p0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- arm-security@arm.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-6790?
- CVE-2024-6790 is a medium-severity vulnerability in Arm 5th Gen Gpu Architecture Kernel Driver, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 6.1/10. Published 2025-02-03.
- How severe is CVE-2024-6790?
- Medium severity. CVSS v3 base score is 6.1 out of 10.
- Is CVE-2024-6790 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.