CVE-2021-28663

CVE-2021-28663 is an Arm Mali GPU kernel-driver use-after-free memory corruption vulnerability that can enable privilege escalation or information disclosure. Affected GPUs span Bifrost (r0p0–r28p0 before r29p0), Valhall (r19p0–r28p0 before r29p0), and Midgard (r4p0–r30p0). The issue arises from ...

CVE-2021-28664

CVE-2021-28664 concerns the Arm Mali GPU kernel driver, enabling privilege escalation or memory corruption (unprivileged user can write to read-only memory). Affected GPU families and revisions: Bifrost r0p0–r29p0 (before r30p0), Valhall r19p0–r29p0 (before r30p0), and Midgard r8p0–r30p0 (before ...

CVE-2023-4211

CVE-2023-4211 affects the Arm Mali GPU Kernel Driver. The issue is a use-after-free/resource management error in the Mali driver that allows a local, non-privileged user to perform improper GPU memory processing and access freed memory. Impact is limited to confidentiality (high impact) with no d...

CVE-2022-38181

CVE-2022-38181 affects the Arm Mali GPU kernel driver across Midgard, Bifrost, and Valhall architectures (r4p0–r32p0; r0p0–r38p1; r39p0; r19p0–r38p1). It is a use-after-free vulnerability that lets unprivileged users access freed memory, enabling memory corruption and potential local privilege es...

CVE-2022-22706

CVE-2022-22706 affects Arm Mali GPU Kernel Driver with an in-scope memory access flaw: a non-privileged user can gain write access to read-only pages. Affected series include Midgard r26p0–r31p0, Bifrost r0p0–r35p0, and Valhall r19p0–r35p0. Connected analyses note upstream ARM fixes (e.g., patchi...

CVE-2023-26083

CVE-2023-26083 is a Mali GPU Kernel Driver information-disclosure vulnerability affecting Midgard, Bifrost, Valhall, and Avalon kernels (versions listed in source). An unprivileged user can cause kernel metadata exposure via a tlstream/Timeline facility, enabling a 16-byte attacker-controlled dat...

CVE-2021-29256

The CVE-2021-29256 entry covers a use-after-free vulnerability in the Arm Mali GPU kernel driver that can let an unprivileged user access freed memory, enabling information disclosure or potential root privilege escalation. Affected GPU families and ranges are: Bifrost r16p0–r29p0 (before r30p0),...

CVE-2023-6241

CVE-2023-6241 is a Use After Free vulnerability in ARM Mali GPU kernel drivers (Midgard, Bifrost, Valhall, and Arm 5th Gen GPU Architecture). It enables a local, non-privileged user to exploit a race condition in memory processing to achieve use-after-free, with impact on the affected driver revi...

CVE-2022-36449

CVE-2022-36449 affects Arm Mali GPU Kernel Driver on Midgard, Bifrost, and Valhall architectures. The issue is an improper memory access that lets a non-privileged user access freed memory, write outside buffers, or disclose memory mappings. Reports indicate upstream ARM Mali driver patches exist...

CVE-2022-28348

CVE-2022-28348 affects Arm Mali GPU Kernel Driver across multiple architectures: Midgard (r4p0–r31p0), Bifrost (r0p0–r36p0 before r37p0), and Valhall (r19p0–r36p0 before r37p0). The issue is described as improper GPU memory operations that can reach a use-after-free condition. The Red Hat and oth...

CVE-2022-46395

CVE-2022-46395 concerns use-after-free in the Arm Mali GPU Kernel Driver. A non-privileged user can trigger improper GPU processing operations to access freed memory across Mali architectures: Midgard (r0p0–r32p0), Bifrost (r0p0–r41p0 before r42p0), Valhall (r19p0–r41p0 before r42p0), and Avalon ...

CVE-2024-0671

CVE-2024-0671 is a Use-After-Free vulnerability in Arm Mali GPU Kernel Drivers (Midgard r19p0–r32p0; Bifrost r7p0–r48p0; Valhall r19p0–r48p0; Arm 5th Gen r41p0–r48p0). A local, non-privileged user can trigger improper GPU memory processing to access memory that has already been freed. Severity is...

CVE-2023-28147

CVE-2023-28147: Arm Mali GPU Kernel Driver contains a use-after-free in improper GPU processing operations, allowing a non-privileged user to access freed memory. Affected: Midgard (r29p0–r32p0), Bifrost (r17p0–r42p0 before r43p0), Valhall (r19p0–r42p0 before r43p0), and Arm Gen5 (r41p0–r42p0 bef...

CVE-2023-6143

CVE-2023-6143 describes a Use-After-Free race condition in ARM Mali GPU Kernel Drivers (Midgard: r13p0–r32p0; Bifrost: r1p0–r18p0; Valhall: r37p0–r46p0; Arm 5th Gen: r41p0–r46p0). A local non-privileged user can trigger improper memory processing under heavy load with carefully prepared memory, l...

CVE-2023-4272

CVE-2023-4272 affects ARM Mali GPU kernel drivers (Midgard, Bifrost, Valhall families) exposing sensitive data from freed memory via local GPU processing operations. Public documents link Mali kernel-driver variants (r8p0–r32p0, r0p0–r41p0, etc.) and describe the vulnerability as local with low a...

CVE-2021-44828

CVE-2021-44828 affects ARM Mali GPU Kernel Driver across cores: Midgard (r26p0–r30p0), Bifrost (r0p0–r34p0), and Valhall (r19p0–r34p0). A non-privileged user can perform improper memory access, potentially writing to read-only memory and achieving root privileges, with memory corruption and cross...

CVE-2022-46891

CVE-2022-46891 concerns the Arm Mali GPU Kernel Driver, with a use-after-free vulnerability that lets a non-privileged user perform improper GPU processing to access freed memory. The affected architectures and ranges are: Midgard r13p0–r32p0, Bifrost r1p0–r40p0, and Valhall r19p0–r40p0. The issu...

CVE-2023-32804

CVE-2023-32804 describes an out-of-bounds write in Arm Mali GPU Userspace Drivers (Midgard, Bifrost, Valhall, and Arm 5th Gen GPUs). A local non-privileged user can write a constant pattern to memory not allocated by the driver. Affected ranges are: Arm Midgard User-space Driver r0p0–r32p0; Bifro...