Is CVE-2023-26083 actively exploited?

CVE-2023-26083 has no public evidence of in-the-wild exploitation as of 2025-11-03.

What is the CVSS score for CVE-2023-26083?

CVE-2023-26083 has a CVSS score of 3.3 (LOW severity). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

How do I patch CVE-2023-26083?

Patch guidance is available from arm security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2023-26083.

CVE-2023-26083 - remediation guidance & executive summary

Q: Which products are affected by CVE-2023-26083?

4 products: arm 5th gen gpu architecture kernel driver, arm bifrost gpu kernel driver, arm midgard gpu kernel driver, arm valhall gpu kernel driver.

Description

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

CVSS Metrics

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector: local
Complexity: low
Privileges: low
User Action: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none
Weaknesses: CWE-401 CWE-401

Metadata

Primary Vendor: ARM
Published: 4/6/2023
Last Modified: 11/3/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

arm : 5th_gen_gpu_architecture_kernel_driverarm : bifrost_gpu_kernel_driverarm : midgard_gpu_kernel_driverarm : valhall_gpu_kernel_driver

Remediation Guidance

Executive Summary

View on NIST NVD