CVE-2022-38181: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2023-03-30. EPSS: 14.1% chance of exploitation in the next 30 days.

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

Affected products

• Arm Bifrost GPU Kernel Driver: from r0p0, up to and including r38p1; version r39p0 only
• Arm Midgard GPU Kernel Driver: from r4p0, up to and including r31p0
• Arm Valhall GPU Kernel Driver: from r19p0, up to and including r38p1; version r39p0 only

Published 2022-10-25. Last modified 2026-06-17.