Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2021-28664 · Published 10/05/2021 · updated 17/06/2026

Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
bifrost gpu kernel driver arm	`≥ r0p0, < r29p0`	`r29p0`
midgard gpu kernel driver arm	`≥ r8p0, < r31p0`	`r31p0`
valhall gpu kernel driver arm	`≥ r19p0, < r29p0`	`r29p0`

Description

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

References

developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
developer.arm.com/support/arm-security-updates · Vendor Advisory
developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2021-28664

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free