CVE-2022-42716
published 2022-12-12CVE-2022-42716: An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain…
PriorityP349high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.26%
65.8th percentile
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r40P0.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arm | valhall_gpu_kernel_driver | r29p0 – r40p0 | — |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rvcg-rwxf-qh25: An issue was discovered in the Arm Mali GPU Kernel Driver
ghsa_unreviewed·2022-12-12
CVE-2022-42716 [HIGH] CWE-416 GHSA-rvcg-rwxf-qh25: An issue was discovered in the Arm Mali GPU Kernel Driver
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r4p0 through r32p0, Bifrost r1p0 through r40p0, and Valhall r19p0 through r40P0.
Android
CVE-2022-42716: Mali
vendor_android·2023-04-01·CVSS 8.8
CVE-2022-42716 [HIGH] CVE-2022-42716: Mali
Android Security Bulletin 2023-04-01
CVE: CVE-2022-42716
Severity: HIGH
Component: Mali
References: A-260148146*
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/170420/Arm-Mali-CSF-KBASE_REG_NO_USER_FREE-Unsafe-Use-Use-After-Free.htmlhttps://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilitieshttp://packetstormsecurity.com/files/170420/Arm-Mali-CSF-KBASE_REG_NO_USER_FREE-Unsafe-Use-Use-After-Free.htmlhttps://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
2022-12-12
Published