ZeroDay Findings
Sign inSign up

Findings

CVE-2021-29256

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Published May 24, 2021 · updated Jun 16, 2026 · arm bifrost gpu kernel driver

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

Timeline

Detection, updates, and resolution for this record.

  1. May 24, 2021 · Catalog

    Detected

    . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

  2. Jul 7, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  3. Jul 28, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

CISA due date Jul 28, 2023

Affected

  • cpe arm/bifrost gpu kernel driverversion unspecified
  • cpe arm/midgard gpu kernel driverversion unspecified
  • cpe arm/valhall gpu kernel driverversion unspecified
  • vendor Arm Mali Graphics Processing Unit (GPU)version unspecified

Sources

  • CISA KEVCVE-2021-29256

    Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

    cisa.gov
  • CVE.orgCVE-2021-29256

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2021-29256

    30-day exploitation probability 3.0%

    first.org
  • NIST NVDCVE-2021-29256

    . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 throu

    nvd.nist.gov

References