CVE-2022-38181 — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

provenance: imported · CVE: CVE-2022-38181

CVE-2022-38181: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Arm
Product	Mali Graphics Processing Unit (GPU)
Date added	2023-03-30
Due date	2023-04-20
Ransomware campaign use	Unknown

Description

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2022-38181

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-38181
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog