PT-2022-26057 · Arm · Arm Mali Gpu Kernel Driver

Published 2022-11-08 · Updated 2025-05-01 · CVE-2022-41757

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions r29p0 through r38p1 Arm Mali GPU Kernel Driver versions r39p0 through r39p0

Description A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory.

Recommendations For versions r29p0 through r38p1, update to version r38p2 or later. For version r39p0, update to version r40p0 or later.

Fix

Weakness Enumeration

CWE-123

Related Identifiers

ASB-A-254445909

CVE-2022-41757

Affected Products

Arm Mali Gpu Kernel Driver

References · 9

• https://osv.dev/vulnerability/CVE-2022-41757 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-254445909 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41757 · Security Note
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://t.me/cvenotify/37388 · Telegram Post
• https://source.android.com/security/bulletin/2023-04-01 · Note
• https://t.me/cibsecurity/52651 · Telegram Post
• https://t.me/cvenotify/120552 · Telegram Post
• https://t.me/cybersecuritytechnologies/7170 · Telegram Post