CVE-2022-22706

arm bifrost gpu kernel driver, arm midgard gpu kernel driver, arm valhall gpu kernel driver

Published 3 Mar 2022 · updated 17 Jun 2026 · Analyzed

7.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 30 Mar 2023, with a remediation deadline of 20 Apr 2023 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

References

developer.arm.com/support/arm-security-updates · Vendor Advisory
developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver · Vendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22706 · US Government Resource