Junglewise Threat Intelligence

CVE-2022-22706: Arm Mali GPU Kernel Driver Unspecified Vulnerability

CVE-2022-22706 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2023-03-30

Technologies: Arm Bifrost GPU Kernel Driver, Arm Valhall GPU Kernel Driver, Arm Mali Graphics Processing Unit (GPU). Vendors: Arm.

Executive brief

The Arm Mali GPU Kernel Driver contains a vulnerability that allows a non-privileged local user to gain write access to read-only memory pages. This memory corruption issue affects Midgard, Bifrost, and Valhall driver architectures within specific version ranges.

Affected products

  • Arm Midgard GPU Kernel Driver r26p0 through r31p0
  • Arm Bifrost GPU Kernel Driver r0p0 through r35p0
  • Arm Valhall GPU Kernel Driver r19p0 through r35p0

Timeline

  • 2022-03-03: disclosed: NVD Published Date
  • 2023-03-30: kev added: Added to CISA Known Exploited Vulnerabilities Catalog

Related threats