{"id":"CVE-2022-41757","aliases":["A-254445909","ASB-A-254445909","EUVD-2022-44928","GHSA-pggw-w357-q8q8"],"status":"published","title":"An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...","description":"An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00911,"percentile":0.60257,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-123"],"published":"2022-11-08T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2023-04-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-04-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"arm","product":"valhall_gpu_kernel_driver"}],"references":[{"url":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41757"},{"url":"https://github.com/advisories/GHSA-pggw-w357-q8q8"},{"url":"https://source.android.com/security/bulletin/2023-04-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-41757","description":"An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2025-05-01T18:50:06.937Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-123"],"updated_at":"2026-11-02T14:34:28.038197Z"}],"euvd":[{"id":"EUVD-2022-44928","description":"An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2025-05-01T18:50:06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:51:56.915258Z"}],"ghsa":[{"id":"GHSA-pggw-w357-q8q8","title":"An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...","description":"An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.","status":"published","published":"2022-11-08T19:00:23Z","modified":"2023-01-30T05:06:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:47:34.932935Z"}],"nvd":[{"id":"CVE-2022-41757","description":"An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.","status":"published","published":"2022-11-08T15:15:11.073Z","modified":"2026-06-17T05:03:45.85Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-123"],"updated_at":"2026-11-02T14:07:31.504574Z"}],"osv":[{"id":"ASB-A-254445909","description":"In kbase_csf_queue_group_suspend_prepare of mali_kbase_csf_kcpu.c , there is a possible out of bounds write due to incorrect memory mapping. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-04-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:15.258551Z"}]}}