CVE-2022-28350

Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation

published May 19, 2022

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

⚠️ A little mishap in the Arm Mali GPU Kernel Driver can lead to a use-after-free situation, potentially causing some unexpected GPU antics! 💡 Think of it like a chef accidentally dropping a hot pan while trying to serve a dish, leaving the kitchen in chaos—some ingredients could get mismanaged and lead to a major mix-up! In this case, an attacker could exploit this use-after-free scenario, which might lead to unpredictable behavior in your system—think flickering visuals or even crashes. While it hasn't been exploited yet, the risk is still there. Better safe than sorry!

Put simply

Think of it like a chef accidentally dropping a hot pan while trying to serve a dish, leaving the kitchen in chaos—some ingredients could get mismanaged and lead to a major mix-up! The vulnerability arises in Arm Mali GPU Kernel Driver versions r29p0 to r36p0, where improper operations can occur, ultimately leading to a use-after-free error, which can be exploited under certain conditions.

What to do

In this case, an attacker could exploit this use-after-free scenario, which might lead to unpredictable behavior in your system—think flickering visuals or even crashes. While it hasn't been exploited yet, the risk is still there. Better safe than sorry! To protect your systems, make sure to upgrade to version r37p0 or later of the Arm Mali GPU Kernel Driver. Regularly check for updates to remain safe as new patches roll out. You've got this! Follow these steps and keep your systems running smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01406 · 72.4th percentile
Published
2022-05-19T01:04Z
EPSS history
Timeline
  • 19 MAY 01:04Z
    Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation
    cvelistv5