CVE-2022-22706

Published: Mar 3, 2022Modified: Jun 17, 2026CISA KEV

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

Affected (3)

Products: Arm: Bifrost Gpu Kernel Driver, Midgard Gpu Kernel Driver, Valhall Gpu Kernel Driver

Arm

3 products

Bifrost Gpu Kernel Driver

Midgard Gpu Kernel Driver

Valhall Gpu Kernel Driver

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Arm Bifrost Gpu Kernel Driver	From r0p0 to r36p0
Arm Midgard Gpu Kernel Driver	From r26p0 to r32p0
Arm Valhall Gpu Kernel Driver	From r19p0 to r36p0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (5)

https://developer.arm.com/support/arm-security-updates

Source: cve@mitre.org

Vendor Advisory

https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver

Source: cve@mitre.org

Vendor Advisory

https://developer.arm.com/support/arm-security-updates

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22706

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.