In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Sep 21, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel | Sep 16, 2021 | Sep 21, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Oct 26, 2021 | Sep 21, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 19, 2018 | Oct 12, 2015 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 11, 2018 | Sep 21, 2017 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub