CyberSec.Space Logo
Back to CVE Browser

CVE-2021-29256

Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score56.7510%
EPSS Percentile93.60th
PublishedMay 24, 2021
Last ModifiedNov 3, 2025

Vulnerability Description

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

Affected Platforms (CPE)

📦
Arm

Bifrost Gpu Kernel Driver

>= r16p0 and < r30p0
📦
Arm

Midgard Gpu Kernel Driver

>= r28p0 and < r31p0
📦
Arm

Valhall Gpu Kernel Driver

>= r19p0 and < r30p0

References & Advisories

🔗 https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
🔗 https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-29256

Related Vulnerabilities

CVE-2021-286638.8

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled,...

CVE-2021-286648.8

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user...

CVE-2021-448287.8

Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) allows a non...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...