CVE-2022-22706

HIGH

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 3/3/2022Modified: 6/17/2026

Related Intelligence (1)

MEDIUMVulnerability

Full source release: autonomous root chain for TCL 50C721 Android TV via CVE-2022-22706 (Mali GPU page-cache write)

[object Object]

CVE-2022-22706
r/netsec

References (5)

https://developer.arm.com/support/arm-security-updatesVendor Advisoryhttps://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driverVendor Advisoryhttps://developer.arm.com/support/arm-security-updatesVendor Advisoryhttps://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driverVendor Advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22706US Government Resource