Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2022-38181)

A remote attacker, with a low-privilege account, can achieve full data confidentiality loss, arbitrary modification of data, complete denial of service or system unavailability. Federal agencies are required to remediate by 2023-04-20 under CISA BOD 22-01.

This is a Use After Free (CWE-416) vulnerability in Arm Mali Graphics Processing Unit (GPU). The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0. Exploitation requires remote network access, low attack complexity, a low-privilege authenticated account, and no user interaction required.

Probably yes if any of these apply:

Active exploitation documented in the wild. Threat-research write-up: https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/