[ CVE-2022-22706 · Published 3 Mar 2022 ]
Arm Mali GPU Kernel Driver Unspecified Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS 1%No fix listed yet
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2023-03-30
[ Description ]Official description
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.
CISA: Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 20 Apr 2023): Apply updates per vendor instructions.
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ References ]References
- developer.arm.com/support/arm-security-updatesVendor Advisory
- developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driverVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource