HIGH

CVE-2021-29256

Arm Bifrost Gpu Kernel Driver 2021-05-24 CVSS v3.1
CVSS
8.8
KEV

Description

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

Summary dbcve.org

A use-after-free vulnerability in the Arm Mali GPU kernel driver allows unprivileged users to access freed memory regions, potentially leading to information disclosure or privilege escalation to root. The flaw exists in the Bifrost, Valhall, and Midgard GPU architectures across specific version ranges.

Mitigation

Update the Arm Mali GPU driver to r30p0 or later, which contains the fix for this use-after-free vulnerability. This requires obtaining and deploying the patched GPU driver/firmware for affected systems.

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

2.99%
Probability of exploitation in next 30 days
86.8th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE