Junglewise Threat Intelligence

CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CVE-2021-29256 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2023-07-07

Technologies: Arm Bifrost GPU Kernel Driver, Arm Valhall GPU Kernel Driver, Arm Mali Graphics Processing Unit (GPU). Vendors: Arm.

Executive brief

The Arm Mali GPU kernel driver contains a use-after-free vulnerability that allows an unprivileged user to access freed memory. This flaw can be exploited to achieve information disclosure or escalate privileges to root.

Affected products

  • Arm Bifrost GPU Kernel Driver r16p0 through r29p0 before r30p0
  • Arm Valhall GPU Kernel Driver r19p0 through r29p0 before r30p0
  • Arm Midgard GPU Kernel Driver r28p0 through r30p0

Timeline

  • 2021-05-24: disclosed: NVD Published Date
  • 2023-07-07: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2023-07-07: exploited: Reported as exploited in the wild in advisory metadata

Related threats