2022
09.21

Arm Mali Race Condition

The Mali driver frees GPU page tables before removing the higher-level PTEs pointing to those page tables (and, therefore, also before issuing the required flushes). This means a racing memory write instruction on the GPU can write to an attacker-controlled physical address.

No Comment.

Add Your Comment

You must be logged in to post a comment.