CVE-2021-29256VulnerabilityPublished 07/07/2023Updated 10/24/2026
CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Affects Arm Mali Graphics Processing Unit (GPU)Source CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 07/07/2023
- KEV deadline
- 07/28/2023
- EPSS
- 3.0% chance of exploitation in 30 days – higher than 87% of CVEs
What to do
CISA required action
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Description
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.