Arm Mali GPU Kernel Driver Unspecified Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2022-22706 · Published 03/03/2022 · updated 17/06/2026

Arm Mali GPU Kernel Driver Unspecified Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 30/03/2023. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
bifrost gpu kernel driver arm	`≥ r0p0, < r36p0`	`r36p0`
midgard gpu kernel driver arm	`≥ r26p0, < r32p0`	`r32p0`
valhall gpu kernel driver arm	`≥ r19p0, < r36p0`	`r36p0`

Description

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

References

developer.arm.com/support/arm-security-updates · Vendor Advisory
developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2022-22706

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free