CVE-2022-28349

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through r23p0 before r24p0.

Published: May 19, 2022
Updated: Apr 14, 2023
CVE: CVE-2022-28349
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-416

Affected Software
References

Software	From	Fixed in
arm / midguard_gpu_kernel_driver	r28p0	r29p0.x
arm / bifrost_gpu_kernel_driver	r17p0	r23p0.x
arm / valhall_gpu_kernel_driver	r19p0	r23p0.x

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
https://developer.arm.com/support/arm-security-updates

Vulnerability Database

CVE-2022-28349