CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
First published: Mon May 24 2021(Updated: )
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Arm Mali Graphics Processing Unit (GPU) | ||
| Google Android | ||
| Arm Bifrost | >=r16p0-01eac0<r30p0-01eac0 | |
| Arm Midgard | >=r28p0-01eac0<=r30p0-01eac0 | |
| Arm Valhall | >=r19p0-01eac0<r30p0-01eac0 |
Remedy
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
- https://source.android.com/docs/security/bulletin/2023-07-01/#asterisk
- https://source.android.com/docs/security/bulletin/2023-07-01 (Advisory)
- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;
- https://nvd.nist.gov/vuln/detail/CVE-2021-29256
Frequently Asked Questions
What is CVE-2021-29256?
CVE-2021-29256 is a use-after-free vulnerability in the Arm Mali GPU Kernel Driver that could allow a non-privileged user to gain root privileges and/or disclose information.
Who is affected by CVE-2021-29256?
The vulnerability affects devices using the Arm Mali Graphics Processing Unit (GPU) and Google Android.
What is the severity of CVE-2021-29256?
CVE-2021-29256 has a high severity level with a CVSS score of 7.
How can CVE-2021-29256 be exploited?
The vulnerability can be exploited by a non-privileged user to gain root privilege and/or disclose information.
How can I fix CVE-2021-29256?
You should update your Arm Mali GPU Kernel Driver to the latest version available and install any relevant patches provided by your device manufacturer.
- agent/type
- agent/description
- agent/severity
- agent/title
- agent/author
- agent/remedy
- agent/weakness
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/event
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/last-modified-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/arm
- canonical/arm bifrost
- version/arm bifrost/r16p0-01eac0
- canonical/arm midgard
- version/arm midgard/r28p0-01eac0
- version/arm midgard/r30p0-01eac0
- canonical/arm valhall
- version/arm valhall/r19p0-01eac0
- vendor/google
- canonical/google android
- canonical/arm mali graphics processing unit (gpu)