7.8Alta
KEV
CVE-2022-22706Arm Mali GPU Kernel Driver Unspecified Vulnerability
Explotación conocida — Arm Mali GPU Kernel Driver Unspecified Vulnerability
CISA confirmó el 30.03.2023 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 20.04.2023.
Acción requerida: Apply updates per vendor instructions. https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2022-22706
Descripción
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.
Debilidad (CWE):
CWE-119
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| arm | bifrost gpu kernel driver | r0p0 – < r36p0 | |
| arm | midgard gpu kernel driver | r26p0 – < r32p0 | |
| arm | valhall gpu kernel driver | r19p0 – < r36p0 |
Referencias y parches
- https://developer.arm.com/support/arm-security-updates Vendor Advisory
- https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22706 US Government Resource
Coincidencias CPE (NVD) (3)
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r0p0 < r36p0cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r26p0 < r32p0cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r19p0 < r36p0