Live › vulnerability › CVE-2022-38181
Go to dashboardArm Mali GPU kernel driver has a use-after-free bug that lets a local non-privileged user gain root and/or read kernel information. CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Arm Mali Graphics Processing Unit (GPU) | vendor | – | – |
| arm bifrost gpu kernel driver | vendor | >= r0p0, <= r38p1 | – |
| arm bifrost gpu kernel driver | vendor | = r39p0 | – |
| arm midgard gpu kernel driver | vendor | >= r4p0, <= r31p0 | – |
| arm valhall gpu kernel driver | vendor | >= r19p0, <= r38p1 | – |
| arm valhall gpu kernel driver | vendor | = r39p0 | – |
Unknown from the sources.
Apply the updates from Arm per its vendor instructions; the specific fixed driver version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
This page as .md · .json · in your agent: get_signal("CVE-2022-38181")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.