8.8Hoch
KEV
CVE-2022-38181Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Bekannt ausgenutzt — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CISA hat am 30.03.2023 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 20.04.2023.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2022-38181
Beschreibung
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
Schwachstellentyp (CWE):
CWE-416
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| arm | bifrost gpu kernel driver | r0p0 – ≤ r38p1 | |
| arm | midgard gpu kernel driver | r4p0 – ≤ r31p0 | |
| arm | valhall gpu kernel driver | r19p0 – ≤ r38p1 |
Referenzen und Patches
- https://developer.arm.com/support/arm-security-updates Vendor Advisory
- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities Vendor Advisory
- https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/ ExploitThird Party Advisory
- https://securitylab.github.com/advisories/GHSL-2022-054_Arm_Mali/ ExploitThird Party Advisory
- http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html Third Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-38181 US Government Resource
CPE-Treffer (NVD) (5)
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r0p0 ≤ r38p1cpe:2.3:a:arm:bifrost_gpu_kernel_driver:r39p0:*:*:*:*:*:*:*cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r4p0 ≤ r31p0cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r19p0 ≤ r38p1cpe:2.3:a:arm:valhall_gpu_kernel_driver:r39p0:*:*:*:*:*:*:*