Exploit/Advisories
Published on September 20th, 2022 📆 | 1773 Views ⚑
0Arm Mali Race Condition
iSpeech.org
The Mali driver frees GPU page tables before removing the higher-level PTEs pointing to those page tables (and, therefore, also before issuing the required flushes). This means a racing memory write instruction on the GPU can write to an attacker-controlled physical address.
Source link
Gloss