What’s Vulnerable › Vulnerabilities

CVE-2022-28349

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-19 · updated 2026-06-17
• Weakness: CWE-416

Description

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through r23p0 before r24p0.

Affected products

• Arm Ltd Bifrost GPU Kernel Driver: from r17p0 through r23p0
• Arm Midguard Gpu Kernel Driver: from r28p0 through r29p0
• Arm Ltd Valhall GPU Kernel Driver: from r19p0 through r23p0

References

• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
• https://developer.arm.com/support/arm-security-updates
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
• https://developer.arm.com/support/arm-security-updates

Get alerted when CVE-2022-28349 or the next vulnerability affects your stack