CVE-2022-28348: Arm Bifrost GPU Kernel Driver

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.

Affected products

• Arm Bifrost GPU Kernel Driver: from r0p0, up to and including r36p0
• Arm Midgard GPU Kernel Driver: from r4p0, up to and including r31p0
• Arm Valhall GPU Kernel Driver: from r19p0, up to and including r36p0

Published 2022-05-19. Last modified 2026-06-17.