---
id: "CVE-2021-29256"
kind: "vulnerability"
aliases: ["CVE-2021-29256"]
title: "Arm Mali Graphics Processing Unit (GPU): Arm Mali GPU Kernel Driver Use-After-Free Vulnerability"
severity: "critical"
cvss: 9.0
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Arm Mali Graphics Processing Unit (GPU)", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "arm bifrost gpu kernel driver", "fixed": ["r30p0"], "affected": ">= r16p0, < r30p0", "ecosystem": "vendor"}, {"name": "arm midgard gpu kernel driver", "fixed": ["r31p0"], "affected": ">= r28p0, < r31p0", "ecosystem": "vendor"}, {"name": "arm valhall gpu kernel driver", "fixed": ["r30p0"], "affected": ">= r19p0, < r30p0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["android", "arm-mali", "embedded-linux", "exploited", "infrastructure", "kernel"]
not_affected_if: ["no-mali-gpu-driver"]
published_at: "2021-05-24T18:15:08+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-29256", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29256", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Arm Mali Graphics Processing Unit (GPU): Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm Mali GPU kernel driver has a use-after-free bug that lets a local non-privileged user gain root and/or read kernel information. CISA lists it as actively exploited.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Arm Mali Graphics Processing Unit (GPU) affected ? fixed ?
- vendor:arm bifrost gpu kernel driver affected >= r16p0, < r30p0 fixed r30p0
- vendor:arm midgard gpu kernel driver affected >= r28p0, < r31p0 fixed r31p0
- vendor:arm valhall gpu kernel driver affected >= r19p0, < r30p0 fixed r30p0

## Fix

Apply the vendor update per Arm's advisory, or stop using affected devices if no update exists (per CISA KEV required action).

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-29256
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2021-29256

## From the sources

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_