CVE-2022-28349: Arm Bifrost GPU Kernel Driver

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through r23p0 before r24p0.

Affected products

• Arm Bifrost GPU Kernel Driver: from r17p0, up to and including r23p0
• Arm Midguard GPU Kernel Driver: from r28p0, up to and including r29p0
• Arm Valhall GPU Kernel Driver: from r19p0, up to and including r23p0

Published 2022-05-19. Last modified 2026-06-17.