PT-2025-15188 · Qualcomm · Snapdragon +6

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while processing IOCTL calls. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-15209 · Qualcomm · Snapdragon +22

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads. Recommendations: At the moment, there is no information about a...

CVE-2024-45544: Use After Free

Memory corruption while processing IOCTL calls to add route entry in the HW...

PT-2025-15214 · Qualcomm · Qualcomm Snapdragon Compute

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Compute affected versions not specified Description: The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. Recommendations: At the momen...

PT-2025-15194

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue is related to memory corruption that occurs while processing IOCTL calls to add a route entry in the hardware. Recommendations At the moment, there is no information about a newer...

PT-2025-15211

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue involves memory corruption that occurs when an IOCTL call is invoked from user-space to read board data. Recommendations At the moment, there is no information about a newer version...

PT-2025-15213 · Qualcomm · Qualcomm Snapdragon Compute

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Compute affected versions not specified Description: The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. Recommendations: At the momen...

CVE-2025-21440: Out-of-bounds Write

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2024-45540: Use After Free

Memory corruption while invoking IOCTL map buffer request from userspace...

PT-2025-15212

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer. Recommendations At the moment, there is no informatio...

CVE-2024-49848: Use After Free

Memory corruption while processing multiple IOCTL calls from HLOS to DSP...

PT-2025-15192

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue involves memory corruption that occurs when invoking an IOCTL map buffer request from userspace. This can potentially lead to unintended system behavior. Recommendations At the momen...

CVE-2025-21438: Out-of-bounds Read

Memory corruption while IOCTL call is invoked from user-space to read board data...

CVE-2025-21439: Out-of-bounds Write

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer...

CVE-2025-21436: Use After Free

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads...

SUSE CVE-2025-21940

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix NULL Pointer Dereference in KFD queue Through KFD IOCTL Fuzzing we encountered a NULL pointer derefrence when calling kfdqueueacquirebuffers. cherry picked from commit 049e5bf3c8406f87c3d8e1958e0a16804fa1d530...

DEBIAN-CVE-2025-21996

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix uninitialized size issue in radeonvcecsparse On the off chance that command stream passed from userspace via ioctl call to radeonvcecsparse is weirdly crafted and first command to execute is to encode case...

UBUNTU-CVE-2025-22001

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaicvalidatereq These are u64 variables that come from the user via qaicattachsliceboioctl. Use checkaddoverflow to ensure that the math doesn't have an integer wrapping bug...

CVE-2025-22001 accel/qaic: Fix integer overflow in qaic_validate_req()

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaicvalidatereq These are u64 variables that come from the user via qaicattachsliceboioctl. Use checkaddoverflow to ensure that the math doesn't have an integer wrapping bug...

CVE-2025-21996 drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix uninitialized size issue in radeonvcecsparse On the off chance that command stream passed from userspace via ioctl call to radeonvcecsparse is weirdly crafted and first command to execute is to encode case...