CVE-2022-22706

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

Score

CVSS 3.1 7.8 High

Status

Analyzed - cve@mitre.org

Published

2022-03-03

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2023-03-30, action due 2023-04-20: Apply updates per vendor instructions.

Weaknesses

CWE-119

Affected products

• Bifrost Gpu Kernel Driver (Arm)
• Midgard Gpu Kernel Driver (Arm)
• Valhall Gpu Kernel Driver (Arm)

References

• https://developer.arm.com/support/arm-security-updates
• https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22706