CVE-2022-22706KEV · OVERDUE

Arm Mali GPU Kernel Driver Unspecified Vulnerability

High · published March 3, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 64.3th percentile for exploit probability.

1282
days past CISA
deadline
CVSS v3.1
7.8
EPSS
1%
Percentile
64.3
In the wild
Confirmed
What it is

🚨 A non-privileged user can gain write access to read-only memory pages! This vulnerability in the Arm Mali GPU Kernel Driver is a game-changer for attackers! ⚡ Think of this vulnerability like a sneaky librarian who can suddenly write notes in the margins of every book, altering the content without authorization. It's a breach of trust, allowing potentially harmful changes where they shouldn't exist! An attacker could manipulate system memory, leading to crashes, data leaks, or even executing arbitrary code—imagine chaos in a library where every book starts telling a different story! This can severely compromise system integrity and user data safety.

Put simply

Think of this vulnerability like a sneaky librarian who can suddenly write notes in the margins of every book, altering the content without authorization. It's a breach of trust, allowing potentially harmful changes where they shouldn't exist! The Arm Mali GPU Kernel Driver vulnerability (CVE-2022-22706) allows non-privileged users to write to memory pages that should only be read, effectively bypassing existing security measures.

What to do

An attacker could manipulate system memory, leading to crashes, data leaks, or even executing arbitrary code—imagine chaos in a library where every book starts telling a different story! This can severely compromise system integrity and user data safety. To defend against this vulnerability, patch your device to the latest version of the driver, ensuring you upgrade to at least Midgard r31p0, Bifrost r35p0, or Valhall r35p0. Regularly audit your systems for any unauthorized access and implement stricter access controls. You've got this! By taking these steps, you're not just patching software—you're protecting your digital library! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01062 · 64.3th percentile
Published
2022-03-03T14:27Z
KEV added
2023-03-30 · due 2023-04-20
EPSS history
Timeline
  • 30 MAR 00:00Z
    Added to CISA KEV — remediate by Apr 20
    kev
  • 03 MAR 14:27Z
    Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages
    cvelistv5