Vulnerability intelligence
CVE-2022-38181
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm Mali Graphics Processing Unit (GPU)
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
CVSS Score
8.8
High
EPSS — Exploit Probability
13%
Riskier than 96% of all CVEs
Exploitation
Confirmed in the wild
Used in ransomware campaigns
Remediation
Patch available
Federal deadline 2023-04-20
CISA required action
Apply updates per vendor instructions. Deadline for federal agencies: 2023-04-20.
1 article across 1 outlet · first covered May 3, 2026 · latest May 3, 2026
Coverage timeline
-
Spyware vendors use 0-days and n-days against popular platformsblog.google · May 3, 2026