ARM
ARM Midgard GPU Kernel Driver: vulnerabilidades y CVE
ARM Midgard GPU Kernel Driver tiene 18 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 7 figuran en el catálogo de explotación activa de CISA.
CVE18
Últimos 12 meses0
Críticas1
Explotadas activamente7
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-4211 | Media (5.5) | 1.1% | ⚠ Explotación activa | 1 oct 2023 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
| CVE-2021-29256 | Alta (8.8) | 3.0% | ⚠ Explotación activa | 24 may 2021 | . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0,… |
| CVE-2023-26083 | Baja (3.3) | 1.2% | ⚠ Explotación activa | 6 abr 2023 | Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from… |
| CVE-2022-22706 | Alta (7.8) | 1.1% | ⚠ Explotación activa | 3 mar 2022 | Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0. |
| CVE-2022-38181 | Alta (8.8) | 14% | ⚠ Explotación activa | 25 oct 2022 | The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0;… |
| CVE-2021-28663 | Alta (8.8) | 12% | ⚠ Explotación activa | 10 may 2021 | The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0,… |
| CVE-2021-28664 | Alta (8.8) | 5.4% | ⚠ Explotación activa | 10 may 2021 | The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-0671 | Media (6.8) | 0.22% | — | 19 abr 2024 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged… |
| CVE-2023-6241 | Alta (7) | 0.72% | — | 4 mar 2024 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged… |
| CVE-2023-6143 | Alta (8.4) | 0.18% | — | 4 mar 2024 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged… |
| CVE-2023-32804 | Alta (7.8) | 0.25% | — | 4 dic 2023 | Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local… |
| CVE-2023-4272 | Media (5.5) | 0.34% | — | 7 nov 2023 | A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. |
| CVE-2023-4211 | Media (5.5) | 1.1% | ⚠ Explotación activa | 1 oct 2023 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
| CVE-2023-28147 | Media (5.5) | 0.18% | — | 2 jun 2023 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost… |
| CVE-2023-26083 | Baja (3.3) | 1.2% | ⚠ Explotación activa | 6 abr 2023 | Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from… |
| CVE-2022-46395 | Alta (8.8) | 2.7% | — | 6 mar 2023 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0… |
| CVE-2022-46891 | Alta (8.8) | 0.81% | — | 17 ene 2023 | An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r13p0… |
| CVE-2022-38181 | Alta (8.8) | 14% | ⚠ Explotación activa | 25 oct 2022 | The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0;… |
| CVE-2022-36449 | Media (6.5) | 1.2% | — | 1 sept 2022 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to… |
| CVE-2022-28348 | Crítica (9.8) | 1.4% | — | 19 may 2022 | Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation. |
| CVE-2022-22706 | Alta (7.8) | 1.1% | ⚠ Explotación activa | 3 mar 2022 | Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0. |
| CVE-2021-44828 | Alta (7.8) | 0.26% | — | 14 ene 2022 | Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) allows a non-privileged user to achieve write access to read-only memory, and possibly obtain root… |
| CVE-2021-29256 | Alta (8.8) | 3.0% | ⚠ Explotación activa | 24 may 2021 | . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0,… |
| CVE-2021-28664 | Alta (8.8) | 5.4% | ⚠ Explotación activa | 10 may 2021 | The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through… |
| CVE-2021-28663 | Alta (8.8) | 12% | ⚠ Explotación activa | 10 may 2021 | The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0,… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.