PT-2022-18967 · Arm · Arm Mali Gpu Kernel Driver

Published 2022-05-19 · Updated 2023-12-13 · CVE-2022-28348

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions Midgard r4p0 through r31p0 Arm Mali GPU Kernel Driver versions Bifrost r0p0 through r36p0 before r37p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r36p0 before r37p0

Description The issue allows improper GPU memory operations to reach a use-after-free situation.

Recommendations For versions Midgard r4p0 through r31p0, update to a version after r31p0. For versions Bifrost r0p0 through r36p0, update to version r37p0 or later. For versions Valhall r19p0 through r36p0, update to version r37p0 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-296463357

CVE-2022-28348

Affected Products

Arm Mali Gpu Kernel Driver

References · 6

• https://developer.arm.com/support/arm-security-updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-28348 · Vendor Advisory
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28348 · Security Note
• https://t.me/cvenotify/30451 · Telegram Post
• https://t.me/cvenotify/30424 · Telegram Post