High severity · published Jan 17, 2023
CVE-2022-46891
An issue was discovered in the Arm Mali GPU Kernel Driver
8.8
CVSS
0.8%
EPSS
No
On KEV
Description
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r13p0 through r32p0, Bifrost r1p0 through r40p0, and Valhall r19p0 through r40p0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BG
Bifrost Gpu Kernel Driver · Arm
r1p0 through r40p0 · source: NVD
MG
Midgard Gpu Kernel Driver · Arm
r13p0 through r32p0 · source: NVD
VG
Valhall Gpu Kernel Driver · Arm
r19p0 through r40p0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46891
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-46891
Vendor Advisory
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
More from Bifrost Gpu Kernel Driver
8.8
CVE-2022-38181
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
8.8
CVE-2021-29256
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
8.8
CVE-2021-28663
Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
8.8
CVE-2021-28664
Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
7.8
CVE-2024-4610
Mali GPU Kernel Driver allows improper GPU memory processing operations