kernel: remoteproc: imx_dsp_rproc: Add mutex protection for workqueue

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxdsprproc: Add mutex protection for workqueue The workqueue may execute late even after remoteproc is stopped or stopping, some resources rpmsg device and endpoint have been released in rprocstopsubdevices, then...

PT-2023-24162 · Qualcomm · Snapdragon +133

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves memory corruption in the audio component when a callback function in the driver is invoked from the ADSP. Recommendations: At the moment, there is no information...

PT-2025-40111

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's remoteproc subsystem, specifically within the imx dsp rproc component. A race condition can occur where a workqueue executes after the remoteproc has...

CVE-2022-27813

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both units are left unconfigured by the...

CVE-2022-27813 Unconfigured memory protection modules in Motorola MTM5000

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both units are left unconfigured by the...

CVE-2022-27813 Unconfigured memory protection modules in Motorola MTM5000

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both units are left unconfigured by the...

CVE-2022-27813

The CVE-2022-27813 entry concerns Motorola MTM5000 series firmwares where memory protection units MPU1 and MPU2 are left unconfigured, failing to shield pages shared between the OMAP-L138 ARM and DSP cores. The result is that an attacker controlling either core can execute code on the other by ov...

Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation

Chipmaker Qualcomm has released security updates to address 17 vulnerabilities in various components, while warning that three other zero-days have come under active exploitation. Of the 17 flaws, three are rated Critical, 13 are rated High, and one is rated Medium in severity. "There are...

CVE-2023-33029

Memory corruption in DSP Service during a remote call from HLOS to DSP...

Memory corruption

Memory corruption in DSP Service during a remote call from HLOS to DSP...

CVE-2023-33029 Use After Free in DSP Service

Memory corruption in DSP Service during a remote call from HLOS to DSP...

CVE-2023-33029

CVE-2023-33029 involves a memory corruption issue in the Qualcomm DSP Service when a remote call is made from HLOS to DSP. Reports consistently describe it as a DSP Service memory corruption vulnerability; CVSS metrics indicate local attack vector, low privileges, no user interaction, and high im...

CVE-2023-33029 Use After Free in DSP Service

Memory corruption in DSP Service during a remote call from HLOS to DSP...

Qualcomm Chip Resource Management Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A resource management error vulnerability exists in the Qualcomm chip that ste...

PT-2023-24154 · Qualcomm · Qualcomm Ar8035

Name of the Vulnerable Software and Affected Versions: Qualcomm AR8035 affected versions not specified Description: The issue is related to memory corruption that occurs when invoking a callback function of the Audio Front End AFE from the Audio Digital Signal Processor ADSP. Recommendations: At...

PT-2023-9160 · Qualcomm · Qualcomm Dsp Firmware

Name of the Vulnerable Software and Affected Versions: Qualcomm DSP firmware affected versions not specified Description: The issue is related to a memory corruption problem when invoking IOCTLs calls from user space for internal memory map and unmap operations. This is connected to the use of...

CVE-2023-21624

Information disclosure in DSP Services while loading dynamic module...

Information disclosure

Information disclosure in DSP Services while loading dynamic module...

CVE-2023-21624 Information Exposure in DSP Services

Information disclosure in DSP Services while loading dynamic module...

CVE-2023-21624

CVE-2023-21624 is an information-disclosure vulnerability in DSP Services triggered when loading a dynamic module. The issue is documented for Qualcomm components (closed-source) and is referenced in the Android Pixel bulletin as affecting Qualcomm chipsets; affected products include Qualcomm DSP...