Arm · Mali Graphics Processing Unit (GPU)
CVE-2021-28663
Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
무엇인가
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.
CISA: Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2021년 11월 17일
Arm의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2023. 7. 7. | Mali GPU Kernel Driver Use-After-Free | Mali Graphics Processing Unit (GPU) | 높음 8.8 | 3.0% |
| 2023. 4. 7. | Mali GPU Kernel Driver Information Disclosure | Mali Graphics Processing Unit (GPU) | 낮음 3.3 | 1.2% |
| 2023. 3. 30. | Mali GPU Kernel Driver Unspecified | Mali Graphics Processing Unit (GPU) | 높음 7.8 | 1.1% |
| 2023. 3. 30. | Mali GPU Kernel Driver Use-After-Free | Mali Graphics Processing Unit (GPU) | 높음 8.8 | 18% |
| 2021. 11. 3. | Unspecified | Mali Graphics Processing Unit (GPU) | 높음 8.8 | 5.4% |
| 2024. 6. 12. | Use-After-Free | Mali GPU Kernel Driver | 높음 7.4 | 0.8% |
| 2023. 10. 3. | Use-After-Free | Mali GPU Kernel Driver | 보통 5.5 | 1.1% |
| 2021. 11. 3. | Out-of-Bounds Write | Trusted Firmware | 보통 5.5 | 3.1% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.