CVE-2021-44828 Memory corruption in n/a
A non-privileged user can exploit a memory corruption flaw in the Arm Mali GPU driver to gain root privileges and modify other processes' memory.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-44828?
CVE-2021-44828 is a high-severity memory corruption vulnerability in Arm Valhall Gpu Kernel Driver, published on 14 Jan 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) allows a non-privileged user to achieve write access to read-only memory, and possibly obtain root privileges, corrupt memory, and modify the memory of other processes.
Weakness: CWE-787
Which versions are affected by CVE-2021-44828?
It affects 3 products.
Products include Arm Bifrost Gpu Kernel Driver, Arm Midgard Gpu Kernel Driver, Arm Valhall Gpu Kernel Driver.
How do I fix CVE-2021-44828?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-44828 being exploited?
There is no known exploitation of CVE-2021-44828 in the wild and no public exploit code.
Other vulnerabilities in Arm Valhall Gpu Kernel Driver
- CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free
- CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free
- CVE-2021-28663 Arm Mali Graphics Processing Unit (GPU) Use-After-Free
- CVE-2021-28664 Arm Mali Graphics Processing Unit (GPU) Unspecified
- CVE-2022-22706 Arm Mali GPU Kernel Driver Unspecified
Sources
Also known as A-296461583, ASB-A-296461583, GHSA-qcq7-c3jg-v7g4.