ZeroDay Findings
Sign inSign up

Findings

CVE-2022-38181

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Published Oct 25, 2022 · updated Jun 16, 2026 · arm bifrost gpu kernel driver

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 25, 2022 · Catalog

    Detected

    The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

  2. Mar 30, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 20, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

Required action

Apply updates per vendor instructions.

CISA due date Apr 20, 2023

Affected

  • cpe arm/bifrost gpu kernel driverversion unspecified
  • cpe arm/bifrost gpu kernel driverr39p0
  • cpe arm/midgard gpu kernel driverversion unspecified
  • cpe arm/valhall gpu kernel driverversion unspecified
  • cpe arm/valhall gpu kernel driverr39p0
  • vendor Arm Mali Graphics Processing Unit (GPU)version unspecified

Sources

  • CISA KEVCVE-2022-38181

    Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

    cisa.gov
  • CVE.orgCVE-2022-38181

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2022-38181

    30-day exploitation probability 14.1%

    first.org
  • NIST NVDCVE-2022-38181

    The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References