Live › vulnerability › CVE-2021-29256
Go to dashboardArm Mali GPU kernel driver has a use-after-free bug that lets a local non-privileged user gain root and/or read kernel information. CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Arm Mali Graphics Processing Unit (GPU) | vendor | – | – |
| arm bifrost gpu kernel driver | vendor | >= r16p0, < r30p0 | r30p0 |
| arm midgard gpu kernel driver | vendor | >= r28p0, < r31p0 | r31p0 |
| arm valhall gpu kernel driver | vendor | >= r19p0, < r30p0 | r30p0 |
Unknown from the sources.
Apply the vendor update per Arm's advisory, or stop using affected devices if no update exists (per CISA KEV required action).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.
This page as .md · .json · in your agent: get_signal("CVE-2021-29256")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.