CVE-2021-28663KEV · OVERDUE

Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

High · published May 10, 2021

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 96.1th percentile for exploit probability.

1802
days past CISA
deadline
CVSS v3.1
8.8
EPSS
12%
Percentile
96.1
In the wild
Confirmed
What it is

🚨 A use-after-free in the Arm Mali GPU kernel driver could let attackers escalate privileges without breaking a sweat! 🔥 Think of it like a waiter forgetting to clear tables after diners leave — the next guests might trip over the leftover cutlery and chaos ensues. This vulnerability allows attackers to access resources that should have been freed, resulting in unexpected and dangerous access. If exploited, an attacker could gain control over the system, accessing sensitive information or performing unauthorized actions. It's a recipe for absolute chaos in your system, as an attacker could effectively become the master of your device!

Put simply

Think of it like a waiter forgetting to clear tables after diners leave — the next guests might trip over the leftover cutlery and chaos ensues. This vulnerability allows attackers to access resources that should have been freed, resulting in unexpected and dangerous access. This vulnerability arises from mishandled GPU memory operations in the Arm Mali GPU kernel driver, specifically affecting multiple versions of the Bifrost, Valhall, and Midgard architectures. Improperly managed memory can lead to privilege escalation or information disclosure, allowing attackers to execute code with elevated privileges.

What to do

If exploited, an attacker could gain control over the system, accessing sensitive information or performing unauthorized actions. It's a recipe for absolute chaos in your system, as an attacker could effectively become the master of your device! To mitigate this risk, upgrade to the latest driver version (r29p0 for Bifrost and Valhall, r31p0 for Midgard) immediately. Regularly audit your systems and monitor for any unusual activity that could indicate exploitation attempts. Don't leave your devices vulnerable! You've got this! By following these steps and staying proactive, you'll lock down your systems and maintain your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.12084 · 96.1th percentile
Published
2021-05-10T00:00Z
KEV added
2021-11-03 · due 2021-11-17
EPSS history
Timeline
  • 03 NOV 00:00Z
    Added to CISA KEV — remediate by Nov 17
    kev
  • 10 MAY 00:00Z
    The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free
    cvelistv5