CVE-2022-38181
Last modified
CVE-2022-38181 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.. CISA has confirmed active exploitation in the wild. EPSS estimates a 12.59% chance of exploitation in the next 30 days.
Description
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Arm | Bifrost Gpu Kernel Driver | >= r0p0, <= r38p1 |
| Arm | Bifrost Gpu Kernel Driver | r39p0 |
| Arm | Midgard Gpu Kernel Driver | >= r4p0, <= r31p0 |
| Arm | Valhall Gpu Kernel Driver | >= r19p0, <= r38p1 |
| Arm | Valhall Gpu Kernel Driver | r39p0 |
References
- http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.htmlThird Party Advisory, VDB Entry
- https://developer.arm.com/support/arm-security-updatesVendor Advisory
- https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/Exploit, Third Party Advisory
- https://securitylab.github.com/advisories/GHSL-2022-054_Arm_Mali/Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.htmlThird Party Advisory, VDB Entry
- https://developer.arm.com/support/arm-security-updatesVendor Advisory
- https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/Exploit, Third Party Advisory
- https://securitylab.github.com/advisories/GHSL-2022-054_Arm_Mali/Exploit, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-38181US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2022-38181?
How severe is CVE-2022-38181?
How do I fix CVE-2022-38181?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-38176An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Inco…7.8
- CVE-2022-38177By spoofing the target resolver with responses that have a m…7.5
- CVE-2022-38178By spoofing the target resolver with responses that have a m…7.5
- CVE-2022-38179JetBrains Ktor before 2.1.0 was vulnerable to the Reflect Fi…6.1
- CVE-2022-3818An uncontrolled resource consumption issue when parsing URLs…5.3
- CVE-2022-38180In JetBrains Ktor before 2.1.0 the wrong authentication prov…6.5
- CVE-2022-38183In Gitea before 1.16.9, it was possible for users to add exi…6.5
- CVE-2022-38184There is an improper access control vulnerability in Portal …7.5
- CVE-2022-38186There is a reflected XSS vulnerability in Esri Portal for Ar…6.1
- CVE-2022-38187Prior to version 10.9.0, the sharing/rest/content/features/a…7.5
- CVE-2022-38188There is a reflected XSS vulnerability in Esri Portal for Ar…6.1
- CVE-2022-38189A stored Cross Site Scripting (XSS) vulnerability in Esri Po…5.4
Are you affected by CVE-2022-38181?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST