ZeroDay Findings
Sign inSign up

Findings

CVE-2021-28664

Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

Published May 10, 2021 · updated Jun 16, 2026 · arm bifrost gpu kernel driver

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

Timeline

Detection, updates, and resolution for this record.

  1. May 10, 2021 · Catalog

    Detected

    The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Nov 17, 2021 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

Required action

Apply updates per vendor instructions.

CISA due date Nov 17, 2021

Affected

  • cpe arm/bifrost gpu kernel driverversion unspecified
  • cpe arm/midgard gpu kernel driverversion unspecified
  • cpe arm/valhall gpu kernel driverversion unspecified
  • vendor Arm Mali Graphics Processing Unit (GPU)version unspecified

Sources

  • CISA KEVCVE-2021-28664

    Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.

    cisa.gov
  • CVE.orgCVE-2021-28664

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2021-28664

    30-day exploitation probability 5.4%

    first.org
  • NIST NVDCVE-2021-28664

    The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and

    nvd.nist.gov

References