In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Sep 21, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade python-perf | Sep 16, 2021 | Sep 21, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Oct 26, 2021 | Sep 21, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 19, 2018 | Oct 12, 2015 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 11, 2018 | Sep 21, 2017 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub