Skip to main content
← All vulnerabilities
CVE-2021-28664

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achie

Published
Last modified
published
Listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

The Arm Mali GPU kernel driver, used in devices with Arm Mali graphics chips, is affected. An unprivileged local user could gain write access to memory that should be read-only, allowing them to escalate privileges or crash the system through memory corruption.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

Timeline

  1. CVE published
  2. Added to CISA KEV

    CISA has evidence of exploitation in the wild

  3. CISA remediation deadline

    Due date for US federal agencies to patch

  4. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 3

developer.arm.com