# CVE-2022-22706

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

- Page: https://www.vulneraibility.com/cve/CVE-2022-22706
- CVSS: 7.8
- Known exploited: yes, in CISA KEV since 2023-03-30; CISA due date 2023-04-20
- EPSS: 1.06% (percentile 65.0)
- Unvetted proof-of-concept code on GitHub: 2 GitHub proofs of concept (first 2026-07-31)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-01-29)
- Weakness: CWE-119
- Published: 2022-03-03

## Affected

- arm:bifrost_gpu_kernel_driver
- arm:midgard_gpu_kernel_driver
- arm:valhall_gpu_kernel_driver

## References

- [other] https://developer.arm.com/support/arm-security-updates
- [other] https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22706

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.