Arm · Mali Graphics Processing Unit (GPU)
CVE-2021-28664
Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
Cos'è
The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.
CISA: Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.
Cosa fare
Apply updates per vendor instructions.
Scadenza per le agenzie federali USA: 17 novembre 2021
Altre falle sfruttate di Arm
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 7 lug 2023 | Mali GPU Kernel Driver Use-After-Free | Mali Graphics Processing Unit (GPU) | Alta 8,8 | 3,0% |
| 7 apr 2023 | Mali GPU Kernel Driver Information Disclosure | Mali Graphics Processing Unit (GPU) | Bassa 3,3 | 1,2% |
| 30 mar 2023 | Mali GPU Kernel Driver Unspecified | Mali Graphics Processing Unit (GPU) | Alta 7,8 | 1,1% |
| 30 mar 2023 | Mali GPU Kernel Driver Use-After-Free | Mali Graphics Processing Unit (GPU) | Alta 8,8 | 18% |
| 3 nov 2021 | Use-After-Free | Mali Graphics Processing Unit (GPU) | Alta 8,8 | 12% |
| 12 giu 2024 | Use-After-Free | Mali GPU Kernel Driver | Alta 7,4 | 0,8% |
| 3 ott 2023 | Use-After-Free | Mali GPU Kernel Driver | Media 5,5 | 1,1% |
| 3 nov 2021 | Out-of-Bounds Write | Trusted Firmware | Media 5,5 | 3,1% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.