CyberSec.Space Logo
Back to CVE Browser

CVE-2022-38181

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2022-10-25
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

Affected Platforms (CPE)

📦
Arm

Bifrost Gpu Kernel Driver

>= r0p0 and <= r38p1= r39p0
📦
Arm

Midgard Gpu Kernel Driver

>= r4p0 and <= r31p0
📦
Arm

Valhall Gpu Kernel Driver

>= r19p0 and <= r38p1= r39p0

References & Advisories

🔗 http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html
🔗 https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
🔗 https://developer.arm.com/support/arm-security-updates
🔗 https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/
🔗 https://securitylab.github.com/advisories/GHSL-2022-054_Arm_Mali/
🔗 http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html
🔗 https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
🔗 https://developer.arm.com/support/arm-security-updates

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Global Cyber Intel Digest: July 23, 2026

Key threat updates including CISA's KEV addition of Langflow CVE-2026-0770 remote code execution, unauthenticated path traversal in Windmill CVE-2026-29059, and ongoing incident response guidance for SonicWall SMA1000 zero-day exposures.

2026-07-23

Global Cyber Intel Digest: July 22, 2026

Coverage of active exploitation targeting on-premise Microsoft SharePoint CVE-2026-50522, Qilin ransomware leveraging PAN-OS CVE-2026-0257 GlobalProtect authentication bypass, and critical security patch updates across enterprise networking hardware.

2026-07-22

Related Vulnerabilities

CVE-2026-175237.8

A flaw was found in the kernel. An unprivileged local user can exploit this vulnerability to execute arbitrary code within the ker...

CVE-2026-64536

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop ...

CVE-2026-64535

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kuma...

CVE-2026-64534

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in diges...