Midgard Gpu Kernel Driver
Vendor:
First CVE: May 10, 2021 · Active for 5 years
18
Total CVEs
More Total CVEs than 93% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
38.9%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Midgard Gpu Kernel Driver over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 10, 2021
5 years ago
Most Recent CVE
Apr 19, 2024
826 days ago
CVE Severity & Scoring
Midgard Gpu Kernel Driver18 CVEs
28%
61%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local10 (55.6%)
Network8 (44.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low17 (94.4%)
High1 (5.6%)
Unknown0 (0.0%)
User Interaction
None18 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low14 (77.8%)
High0 (0.0%)
None4 (22.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-38181HIGH The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Va | Oct 25, 2022 | 8.8 | 74 | YES | NO |
CVE-2021-28663HIGH The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost | May 10, 2021 | 8.8 | 70 | YES | NO |
CVE-2021-28664HIGH The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. | May 10, 2021 | 8.8 | 68 | YES | NO |
CVE-2021-29256HIGH . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost | May 24, 2021 | 8.8 | 67 | YES | NO |
CVE-2022-22706HIGH Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and | Mar 3, 2022 | 7.8 | 64 | YES | NO |
CVE-2023-4211MEDIUM A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. | Oct 1, 2023 | 5.5 | 59 | YES | NO |
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall G | Apr 6, 2023 | 3.3 | 51 | YES | NO |
CVE-2022-28348CRITICAL Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations | May 19, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-46395HIGH An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Mi | Mar 6, 2023 | 8.8 | 28 | NO | NO |
CVE-2022-46891HIGH An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already fr | Jan 17, 2023 | 8.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
7 CVEs
38.9% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Midgard Gpu Kernel Driver
Top CWEs
Versions
No cataloged versions.