CVE-2022-46395
Published: 06 March 2023
Summary
CVE-2022-46395 is a high-severity Use After Free (CWE-416) vulnerability in Arm Avalon Gpu Kernel Driver. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 2.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The vulnerability is a use-after-free flaw (CWE-416) in the Arm Mali GPU Kernel Driver. A non-privileged user can trigger improper GPU processing operations that grant access to already-freed memory. The issue affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0, Valhall r19p0 through r41p0, and Avalon r41p0; the fixed release is r42p0 for the Bifrost, Valhall, and Avalon families.
An attacker with low privileges can exploit the flaw over a network-adjacent path to achieve arbitrary code execution or escalate privileges, as reflected in the CVSS 8.8 score. Public proof-of-concept material on Packet Storm demonstrates the path to arbitrary code execution on Android devices using the vulnerable Mali driver.
Arm security advisories direct users to upgrade to Mali driver release r42p0 or later and list the affected product families along with the corresponding fixed versions.
The EPSS score has reached a peak of 0.4844 with a current value of 0.4711, indicating sustained exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-49204
Vulnerability details
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0 before r42p0, Valhall…
more
r19p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Use-after-free exploits that achieve arbitrary code execution are blocked or significantly hardened by non-executable pages and ASLR.