CVE-2021-28664Exploit(arm / bifrost_gpu_kernel_driver)

LOWCVSS 8.8 · HIGHCISA KEV

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for arm bifrost_gpu_kernel_driver systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

arm CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2021-11-17. Apply updates per vendor instructions.

Vendor / third-party advisories

Other references

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-28664

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

bifrost_gpu_kernel_driver
midgard_gpu_kernel_driver
valhall_gpu_kernel_driver

Threat summary

Public PoC and exploit tooling are both present
1 mentions across 1 observed day

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

arm

Products

bifrost_gpu_kernel_drivermidgard_gpu_kernel_drivervalhall_gpu_kernel_driver

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Exploit

1100.0%

Referenced assets1 URL

By indicator

https://cybrmonk.com/blog/cve-2021-28664-exploit-code-hits-github-unprivileged-users-can-now-corrupt-arm-mali-gpu-memory

Full discourse1 post

cybrmonk@cybr_monk45d
Exploit
CVE-2021-28664 Exploit Code Hits GitHub, Unprivileged Users Can Now Corrupt ARM Mali GPU Memory https://cybrmonk.com/blog/cve-2021-28664-exploit-code-hits-github-unprivileged-users-can-now-corrupt-arm-mali-gpu-memory #cybersecurity #threatintelligence https://t.co/JMAn4hltDX
Post summary
CVE‑2021‑28664, which allows unprivileged users to corrupt ARM Mali GPU memory, now has publicly available exploit code on GitHub, but no evidence of active exploitation yet.
0000044
47 followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	arm	bifrost_gpu_kernel_driver	-	-	-
App	arm	midgard_gpu_kernel_driver	-	-	-
App	arm	valhall_gpu_kernel_driver	-	-	-

Explore more

Back to dashboard arm CVEs bifrost_gpu_kernel_driver vulnerabilities