Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• arm bifrost gpu kernel driverr0p0 and later · up to r36p0 inclusive
• arm midgard gpu kernel driverr4p0 and later · up to r31p0 inclusive
• arm valhall gpu kernel driverr19p0 and later · up to r36p0 inclusive

Other highest-scoring records for the same primary product.

• CVE-2022-38181The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled.KEV
  69This week
• CVE-2021-28663The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading tKEV
  69This week
• CVE-2021-28664The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieKEV
  67This week
• CVE-2021-29256.KEV
  66This week
• CVE-2024-4610Mali GPU Kernel Driver allows improper GPU memory processing operationsKEV
  61This week
• CVE-2022-22706Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages.KEV
  61This week

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

After a memory region is freed, another reference pointing to it is still used. By then, the same region may have been allocated for different data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1free(dev->buf);2/* ... another thread is still running ... */3process(dev->buf);

1lock(&dev->lock);2free(dev->buf);3dev->buf = NULL;4unlock(&dev->lock);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.