ClosedHighPatched

Arm Mali Graphics Processing Unit (GPU): 2 exploited vulnerabilities (CVE-2022-22706, CVE-2022-38181)

Arm Mali Graphics Processing Unit (GPU)

Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages. Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. Added to CISA KEV on 2023-03-30.

Why this severity: CVSS 8.8 (NVD), actively exploited (CISA KEV)

Started: Mar 30, 2023
Closed: Mar 30, 2023
CVEs: CVE-2022-22706 CVE-2022-38181

Follow this incident

Updated Mar 30, 2023

Affected

See vendor advisory / CISA notes (versions not always listed in KEV feed)

Fixed in

See vendor advisory linked in sources

Timeline2

Mar 30, 2023
CISA added CVE-2022-22706 to the KEV catalog (due 2023-04-20).
Mar 30, 2023
CISA added CVE-2022-38181 to the KEV catalog (due 2023-04-20).

Advisories4

Notes & caveats

Derived from CISA KEV JSON feed catalogVersion 2026.10.21. Exact affected/fixed version strings are not always in the KEV record — verify against the vendor advisory URL. startedAt uses dateAdded (exploitation may have begun earlier). Grouped: same vendor/product added to KEV on the same day.

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Get notified