CVE-2021-29256 — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Arm |
| Product | Mali Graphics Processing Unit (GPU) |
| Date added | 2023-07-07 |
| Due date | 2023-07-28 |
| Ransomware campaign use | Unknown |
Description
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.
Required action (CISA)
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Notes
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2021-29256
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-29256
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog