CVE-2022-42716: Use After Free
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r40P0.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-42716?
CVE-2022-42716 is a vulnerability in the Arm Mali GPU Kernel Driver that allows a non-privileged user to gain access to already freed memory through improper GPU processing operations.
How does CVE-2022-42716 affect Arm Bifrost Gpu Kernel Driver?
CVE-2022-42716 affects the Arm Bifrost Gpu Kernel Driver versions r1p0 through r40P0.
How does CVE-2022-42716 affect Arm Midguard Gpu Kernel Driver?
CVE-2022-42716 affects the Arm Midguard Gpu Kernel Driver versions r4p0 through r32p0.
How does CVE-2022-42716 affect Arm Valhall Gpu Kernel Driver?
CVE-2022-42716 affects the Arm Valhall Gpu Kernel Driver versions r19p0 through r40P0.
How severe is CVE-2022-42716?
CVE-2022-42716 has a severity rating of 8.8 (high).
Are there any references related to CVE-2022-42716?
Yes, there are references available for CVE-2022-42716. You can find them at the following links: [Packet Storm Security](http://packetstormsecurity.com/files/170420/Arm-Mali-CSF-KBASE_REG_NO_USER_FREE-Unsafe-Use-Use-After-Free.html), [Arm Security Center](https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities), [Android Security Bulletin](https://source.android.com/docs/security/bulletin/2023-04-01/#asterisk).