In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Sep 21, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools | Sep 16, 2021 | Sep 21, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Oct 26, 2021 | Sep 21, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 19, 2018 | Oct 12, 2015 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 11, 2018 | Sep 21, 2017 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub