# CVE-2021-29256

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

- Page: https://www.vulneraibility.com/cve/CVE-2021-29256
- CVSS: 8.8
- Known exploited: yes, in CISA KEV since 2023-07-07; CISA due date 2023-07-28
- EPSS: 2.99% (percentile 87.5)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-02-04)
- Weakness: CWE-416
- Published: 2021-05-24

## Affected

- arm:bifrost_gpu_kernel_driver
- arm:midgard_gpu_kernel_driver
- arm:valhall_gpu_kernel_driver

## References

- [other] https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-29256

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.