Firetruck

CVE-2021-28663

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
bifrost_gpu_kernel_driverarm / bifrost_gpu_kernel_driver>= 0, <= r28p0affected
midgard_gpu_kernel_driverarm / midgard_gpu_kernel_driver>= 0, <= r30p0affected
n/an/a / n/an/aaffected
valhall_gpu_kernel_driverarm / valhall_gpu_kernel_driver>= 0, <= r28p0affected