PT-2022-12237 · Arm · Arm Mali Gpu Kernel Driver

Published 2022-01-14 · Updated 2023-12-13 · CVE-2021-44828

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions Midgard r26p0 through r30p0 Arm Mali GPU Kernel Driver versions Bifrost r0p0 through r34p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r34p0

Description The issue allows a non-privileged user to achieve write access to read-only memory. This could lead to obtaining root privileges, corrupting memory, or modifying the memory of other processes.

Recommendations For Arm Mali GPU Kernel Driver versions Midgard r26p0 through r30p0, update to a version outside of the affected range to resolve the issue. For Arm Mali GPU Kernel Driver versions Bifrost r0p0 through r34p0, update to a version outside of the affected range to resolve the issue. For Arm Mali GPU Kernel Driver versions Valhall r19p0 through r34p0, update to a version outside of the affected range to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ASB-A-296461583

CVE-2021-44828

Affected Products

Arm Mali Gpu Kernel Driver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-44828 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44828 · Vendor Advisory
• https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver · Vendor Advisory