CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2022-28348

CVSS 9.8v3.1pub. 2022-05-19upd. 2024-11-21

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Arm Bifrost Gpu Kernel Driver

    APP
    Arm
    r0p0 – r36p0

  • Arm Midgard Gpu Kernel Driver

    APP
    Arm
    r4p0 – r31p0

  • Arm Valhall Gpu Kernel Driver

    APP
    Arm
    r19p0 – r36p0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2022-28349CRITICAL9.8PL ✓same product

Use-after-free w sterowniku GPU Arm Mali — Midgard, Bifrost, Valhall

CVE-2022-28350CRITICAL9.8PL ✓same product

Use-after-free w sterowniku jądra Arm Mali GPU (Valhall)

CVE-2024-4610HIGH7.8⚠ KEVsame product

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a ...

CVE-2022-38181HIGH8.8⚠ KEVsame product

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations ...

CVE-2022-22706HIGH7.8⚠ KEVsame product

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. Thi...