What’s Vulnerable › Vulnerabilities

CVE-2022-28348

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-19 · updated 2026-06-17
• Weakness: CWE-416

Description

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.

Affected products

• Arm Ltd Bifrost GPU Kernel Driver: from r0p0 through r36p0
• Arm Ltd Midgard GPU Kernel Driver: from r4p0 through r31p0
• Arm Ltd Valhall GPU Kernel Driver: from r19p0 through r36p0

References

• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
• https://developer.arm.com/support/arm-security-updates
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
• https://developer.arm.com/support/arm-security-updates

Get alerted when CVE-2022-28348 or the next vulnerability affects your stack