CVE-2024-45554 Use After Free in DSP Service

Memory corruption during concurrent SSR execution due to race condition on the global maps list...

DEBIAN-CVE-2022-49821

In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNdspelementregister Afer commit 1fa5ae857bb1 "driver core: get rid of struct device's busid string array", the name of device is allocated dynamically, use putdevice to give up the reference...

UBUNTU-CVE-2022-49821

In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNdspelementregister Afer commit 1fa5ae857bb1 "driver core: get rid of struct device's busid string array", the name of device is allocated dynamically, use putdevice to give up the reference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a device reference not being properly freed in mISDNdspelementregister, which could lead to a memory leak...

CVE-2024-49848

Memory corruption while processing multiple IOCTL calls from HLOS to DSP...

CVE-2024-49848

Memory corruption while processing multiple IOCTL calls from HLOS to DSP...

CVE-2025-21436 Use After Free in DSP Service

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads...

CVE-2025-21436 Use After Free in DSP Service

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads...

CVE-2025-21436

CVE-2025-21436 describes a memory corruption vulnerability in Qualcomm/SoC kernel code triggered when two IOCTL calls are initiated concurrently from two different threads to create processes. The issue is characterized by local attack vector with low privileges required and no user interaction, ...

CVE-2024-49848 Use After Free in DSP Service

Memory corruption while processing multiple IOCTL calls from HLOS to DSP...

CVE-2024-49848

CVE-2024-49848 concerns memory corruption in Qualcomm ADSPRPC FP/DSP interaction (the adsprpc kernel driver) via fastrpc_mmap structures. The provided sources describe a use-after-free vulnerability in FASTRPC_ATTR_KEEP_MAP handling that can allow a freed fastrpc_mmap object to be referenced by a...

CVE-2024-49848 Use After Free in DSP Service

Memory corruption while processing multiple IOCTL calls from HLOS to DSP...

CVE-2024-53033 Untrusted Pointer Dereference in DSP_Services

Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address...

CVE-2024-45580 Use After Free in DSP Service

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation...

CVE-2024-45580 Use After Free in DSP Service

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation...

CVE-2022-49733 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is called from OSS PCM SNDCTLDSPSYNC ioctl; namely the function calls sndpcmossmakeready at first, then takes the paramslock mutex for t...

CVE-2022-49733 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is called from OSS PCM SNDCTLDSPSYNC ioctl; namely the function calls sndpcmossmakeready at first, then takes the paramslock mutex for t...

Astra Linux – Vulnerability in ffmpeg

FFmpeg n6.1.1 has a out-of-bounds read issue through libavcodec/ppc/vp8dspaltivec.c, as shown in the line: static const vecs8 hsubpelfiltersouter...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Use strnlen on name fields in V1 wmfw files. Use strnlen instead of strlen for the algorithm and coefficient name string arrays in V1 wmfw files. In V1 wmfw files, the name is a NUL-terminated string stored in a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Prevent buffer overflows when processing V2 algorithm headers. It is necessary to ensure that all fields of a V2 algorithm header fit within the available firmware data buffer. The wmfw V2 format introduced...