HIGH

CVE-2021-28664

Arm Bifrost Gpu Kernel Driver 2021-05-10 CVSS v3.1
CVSS
8.8
KEV

Description

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

Summary dbcve.org

A privilege escalation vulnerability exists in the Arm Mali GPU kernel driver where unprivileged users can achieve read/write access to read-only memory pages, leading to potential kernel-level privilege escalation or memory corruption causing denial of service. The flaw affects multiple GPU architectures (Bifrost, Valhall, Midgard) across specific version ranges.

Mitigation

Update the Mali GPU driver to r30p0 or later for Bifrost/Valhall variants, or r31p0 or later for Midgard variants, through system or firmware updates provided by the device manufacturer or OS vendor.

Weakness (CWE)

CWE-787 Out-of-bounds Write

EPSS Score

5.41%
Probability of exploitation in next 30 days
92.4th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE