Live › vulnerability › CVE-2021-28664
Go to dashboardThe Arm Mali GPU kernel driver has an unspecified flaw that lets a non-privileged local user write to read-only memory and gain root. It is listed in CISA's Known Exploited Vulnerabilities catalog, so attacks have been observed in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Arm Mali Graphics Processing Unit (GPU) | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the updates per the vendor instructions from Arm; the sources do not name the fixed driver version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.
This page as .md · .json · in your agent: get_signal("CVE-2021-28664")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.