Junglewise Threat Intelligence

CVE-2021-28664: Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

CVE-2021-28664 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2021-11-03

Technologies: Arm Valhall GPU Kernel Driver, Arm Mali Graphics Processing Unit (GPU), Arm Bifrost GPU Kernel Driver. Vendors: Arm.

Executive brief

The Arm Mali GPU kernel driver contains a vulnerability that allows an unprivileged user to gain read/write access to read-only memory pages. This flaw can lead to local privilege escalation, memory corruption, or denial of service.

Affected products

  • Arm Bifrost GPU Kernel Driver r0p0 through r29p0 before r30p0
  • Arm Valhall GPU Kernel Driver r19p0 through r29p0 before r30p0
  • Arm Midgard GPU Kernel Driver r8p0 through r30p0 before r31p0

Timeline

  • 2021-11-03: disclosed
  • 2021-11-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog

Related threats