PT-2022-18968 · Arm · Arm Mali Gpu Kernel Driver

Published 2022-05-19 · Updated 2022-05-28 · CVE-2022-28349

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions Midgard r28p0 through r29p0 Arm Mali GPU Kernel Driver versions Bifrost r17p0 through r23p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r23p0

Description The issue is related to a use-after-free in the Arm Mali GPU Kernel Driver.

Recommendations For Arm Mali GPU Kernel Driver versions Midgard r28p0 through r29p0, update to version r30p0 or later. For Arm Mali GPU Kernel Driver versions Bifrost r17p0 through r23p0, update to version r24p0 or later. For Arm Mali GPU Kernel Driver versions Valhall r19p0 through r23p0, update to version r24p0 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-278616909

CVE-2022-28349

Affected Products

Arm Mali Gpu Kernel Driver

References · 5

• https://developer.arm.com/support/arm-security-updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-28349 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28349 · Security Note
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://t.me/cvenotify/30450 · Telegram Post