HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2022-22706

CVSS 7.8v3.1pub. 2022-03-03upd. 2025-11-03

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Arm Bifrost Gpu Kernel Driver

    APP
    Arm
    r0p0 – r36p0 (bez)

  • Arm Midgard Gpu Kernel Driver

    APP
    Arm
    r26p0 – r32p0 (bez)

  • Arm Valhall Gpu Kernel Driver

    APP
    Arm
    r19p0 – r36p0 (bez)

CISA KEV — detailsi

Vendori
Arm
Producti
Mali Graphics Processing Unit (GPU)
Added to KEVi
March 30, 2023
Remediation deadline (US Federal)i
April 20, 2023(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 20 kwietnia 2023
CWE
References

Related vulnerabilities

CVE-2022-28350CRITICAL9.8ten sam produkt

Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach...

CVE-2022-28348CRITICAL9.8ten sam produkt

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r...

CVE-2022-28349CRITICAL9.8ten sam produkt

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 throu...

CVE-2024-4610HIGH7.8⚠ KEVten sam produkt

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a ...

CVE-2022-38181HIGH8.8⚠ KEVten sam produkt

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations ...