Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers

Arm disclosed CVE-2024-4610, a use‑after‑free flaw in Bifrost and Valhall Mali GPU kernel drivers that can allow a local non‑privileged user to access already freed memory; the issue was fixed in r41p0 (Nov 24, 2022) and current drivers are r49p0 (Apr 2024). Arm confirmed the issue was reclassified as a vulnerability after new information and acknowledged reports of in-the-wild exploitation; users of affected products are advised to update to patched driver versions.