HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2022-22706

CVSS 7.8v3.1pub. 2022-03-03upd. 2025-11-03

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Arm Bifrost Gpu Kernel Driver

    APP
    Arm
    r0p0 – r36p0 (excl.)

  • Arm Midgard Gpu Kernel Driver

    APP
    Arm
    r26p0 – r32p0 (excl.)

  • Arm Valhall Gpu Kernel Driver

    APP
    Arm
    r19p0 – r36p0 (excl.)

CISA KEV — detailsi

Vendori
Arm
Producti
Mali Graphics Processing Unit (GPU)
Added to KEVi
March 30, 2023
Remediation deadline (US Federal)i
April 20, 2023(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 20 kwietnia 2023
CWE
References

Related vulnerabilities

CVE-2022-28350CRITICAL9.8PL ✓same product

Use-after-free w sterowniku jądra Arm Mali GPU (Valhall)

CVE-2022-28348CRITICAL9.8PL ✓same product

Use-after-free w sterowniku jądra GPU Arm Mali (Midgard/Bifrost/Valhall)

CVE-2022-28349CRITICAL9.8PL ✓same product

Use-after-free w sterowniku GPU Arm Mali — Midgard, Bifrost, Valhall

CVE-2024-4610HIGH7.8⚠ KEVsame product

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a ...

CVE-2022-38181HIGH8.8⚠ KEVsame product

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations ...