CVE-2023-28575

The camgetdevicepriv function does not check the type of handle being returned device/session/link. This would lead to invalid type usage if a wrong handle is passed to it...

CVE-2023-28575

CVE-2023-28575 affects Qualcomm chipsets and concerns the cam_get_device_priv function, which does not validate the type of handle (device/session/link) returned. This can allow invalid handle usage and could impact confidentiality, integrity, and availability (C:H/I:H/A:H) with a local attacker ...