CVE-2022-28348

Critical

Description

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.

SeverityCritical
CVSS9.8
Exploit probability—
ProductArm Bifrost Gpu Kernel Driver
PublishedMay 19, 2022
First seenMay 19, 2022

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
arm bifrost_gpu_kernel_driverr0p0 ≤ v ≤ r36p0—
arm midgard_gpu_kernel_driverr4p0 ≤ v ≤ r31p0—
arm valhall_gpu_kernel_driverr19p0 ≤ v ≤ r36p0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.