CVE-2021-28664

Published: May 10, 2021Modified: Jun 17, 2026CISA KEV

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

Affected (3)

Products: Arm: Bifrost Gpu Kernel Driver, Midgard Gpu Kernel Driver, Valhall Gpu Kernel Driver

3 products

Bifrost Gpu Kernel Driver

Midgard Gpu Kernel Driver

Valhall Gpu Kernel Driver

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Arm Bifrost Gpu Kernel Driver	From r0p0 to r29p0
Arm Midgard Gpu Kernel Driver	From r8p0 to r31p0
Arm Valhall Gpu Kernel Driver	From r19p0 to r29p0

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (7)

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

Source: cve@mitre.org

Vendor Advisory

https://developer.arm.com/support/arm-security-updates

Source: cve@mitre.org

Vendor Advisory

https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver

Source: cve@mitre.org

Vendor Advisory

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://developer.arm.com/support/arm-security-updates

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-28664

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.