CVE-2022-28348

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.

Published: May 19, 2022
Updated: Apr 14, 2023
CVE: CVE-2022-28348
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-416

Affected Software
References

Software	From	Fixed in
arm / bifrost_gpu_kernel_driver	r0p0	r36p0.x
arm / valhall_gpu_kernel_driver	r19p0	r36p0.x
arm / midgard_gpu_kernel_driver	r4p0	r31p0.x

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
https://developer.arm.com/support/arm-security-updates

Vulnerability Database

CVE-2022-28348