CVE-2021-28663
Published · Updated
81Vexday Risk Score
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
ssvc Actcvss 8.8epss 12%
from disclosure to weapon114 days
Published on NVDMay 10
1st PoC+114d
CISA KEV+177d
exploitation probability
12%top 4% of all CVEs
observed exploitation
yesCISA + VulnCheck
2 public exploit(s)
Action required by CISAfederal deadline: 2021-11-17
Apply updates per vendor instructions.
In short
The Arm Mali GPU driver has a flaw where it incorrectly manages memory, allowing freed memory to be used again. This can let attackers gain higher system privileges or read sensitive data on affected devices.
Technical detail
A use-after-free vulnerability in GPU memory operations allows privilege escalation or information disclosure when freed memory is accessed. The vulnerability affects Bifrost (r0p0–r28p0), Valhall (r19p0–r28p0), and Midgard (r4p0–r30p0) GPU kernel drivers; exploitation requires local access to trigger GPU memory operations.
Summary generated and translated by AI from the official description.
The full analysis of this CVE is available in Portuguese →
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 2
githubgithub.com/lntrx/CVE-2021-28663★ 125vulncheckvulncheck.com/xdb/7fe79c6d9e0dunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.