high7.8Known exploited
CVE-2022-22706
Arm Mali GPU Kernel Driver Unspecified Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-03-30. Federal due date: 2023-04-20.
Apply updates per vendor instructions.
Impact
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arm | Bifrost Gpu Kernel Driver | from r0p0 before r36p0 |
| Arm | Midgard Gpu Kernel Driver | from r26p0 before r32p0 |
| Arm | Valhall Gpu Kernel Driver | from r19p0 before r36p0 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://developer.arm.com/support/arm-security-updates
- https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
- https://developer.arm.com/support/arm-security-updates
- https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22706