← Volver a CVEs

CVE-2021-28664

HIGHCISA KEV

8.8

Descripcion

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

Detalles CVE

Puntuacion CVSS v3.18.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado5/10/2021

Ultima modificacion11/3/2025

Fuentekev

Avistamientos honeypot0

CISA KEV

VendedorArm

ProductoMali Graphics Processing Unit (GPU)

Nombre vulnerabilidadArm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

Fecha inclusion KEV2021-11-03

Fecha limite remediacion2021-11-17

Uso en ransomwareUnknown

Productos afectados

arm:bifrost_gpu_kernel_driverarm:midgard_gpu_kernel_driverarm:valhall_gpu_kernel_driver

Debilidades (CWE)

CWE-787CWE-787

Referencias

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities(cve@mitre.org)

https://developer.arm.com/support/arm-security-updates(cve@mitre.org)

https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver(cve@mitre.org)

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities(af854a3a-2127-422b-91ae-364da2661108)

https://developer.arm.com/support/arm-security-updates(af854a3a-2127-422b-91ae-364da2661108)

https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-28664(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.