CVE-2022-46891: Use After Free
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r13p0 through r32p0, Bifrost r1p0 through r40p0, and Valhall r19p0 through r40p0.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-46891?
CVE-2022-46891 is a vulnerability in the Arm Mali GPU Kernel Driver that allows a non-privileged user to gain access to already freed memory through improper GPU processing operations.
Which software is affected by CVE-2022-46891?
CVE-2022-46891 affects Midgard r13p0 through r32p0, Bifrost r1p0 through r40p0, and Valhall r19p0 through r40p0.
What is the severity of CVE-2022-46891?
The severity of CVE-2022-46891 is high with a CVSS score of 8.8.
How can I fix CVE-2022-46891?
To fix CVE-2022-46891, it is recommended to update to the latest version of the Arm Mali GPU Kernel Driver and apply any patches or security updates provided by the vendor.
Where can I find more information about CVE-2022-46891?
You can find more information about CVE-2022-46891 in the following references: [Reference 1](https://source.android.com/docs/security/bulletin/2023-05-01/#asterisk), [Reference 2](https://source.android.com/docs/security/bulletin/2023-05-01), [Reference 3](https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities).