CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free
Unprivileged users can access freed memory in the Arm Mali GPU kernel driver, potentially leading to information disclosure or privilege escalation on Android devices.
- Exploited in the wild
- Since 30 Mar 2023
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-38181?
CVE-2022-38181 is a high-severity use after free vulnerability in Arm Valhall Gpu Kernel Driver, published on 25 Oct 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
Weakness: CWE-416
Which versions are affected by CVE-2022-38181?
It affects 3 products.
Products include Arm Bifrost Gpu Kernel Driver, Arm Midgard Gpu Kernel Driver, Arm Valhall Gpu Kernel Driver.
How do I fix CVE-2022-38181?
Apply the vendor's patch. US federal agencies must fix it by 20 Apr 2023.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2022-38181 being exploited?
Yes. Attackers have exploited CVE-2022-38181 in the wild since at least 30 Mar 2023.
Public exploit code: 7 proofs of concept on GitHub.
Other vulnerabilities in Arm Valhall Gpu Kernel Driver
- CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free
- CVE-2021-28663 Arm Mali Graphics Processing Unit (GPU) Use-After-Free
- CVE-2021-28664 Arm Mali Graphics Processing Unit (GPU) Unspecified
- CVE-2022-22706 Arm Mali GPU Kernel Driver Unspecified
- CVE-2024-4610 Arm Mali GPU Kernel Driver Use-After-Free
Sources
Also known as A-259695958, ASB-A-259695958, GHSA-h73c-qgg5-q5rp.