10956 matches found
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: Net: qcom/emac: fixed a UAF Use-after-Free issue in emacremove. “adpt” is netdev private data, and it cannot be used after the freenetdev call. Using “adpt” after freenetdev can cause a UAF bug. This issue was fixed by moving the...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: fix runtime PM underflow The commit dbad41e7bb5f “dmaengine: qcom: bamdma: check if the runtime pm enabled” caused unbalanced pmruntimeget/put calls when the bam was controlled remotely. This commit rever...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer The driver’s probe allocates memory for the RX FIFO port-rxfifo based on the default RX FIFO depth, such as 16. Later, during serial initialization,...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fixed a NULL dereferencing on non-serdev controllers during suspension. Qualcomm ROME controllers can be registered through the Bluetooth interface. In this case, the HCI UART serdev pointer is NULL. A missing...
Astra Linux – Vulnerability in Linux
A out-of-bounds memory read flaw was discovered in the Qualcomm IPC router protocol within the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, resulting in a system crash or the leakage of internal kernel information. The greatest threat posed ...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: slimbus: qcom-ngd: cleanup in the probe error path Added a proper error path in the probe function to clean up resources that were previously acquired/allocated, in order to fix warnings that appear during probe deferral: The...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: q6v5: Fixed a potential null-ptr-deref in q6v5wcssinitmmio The q6v5wcssinitmmio function will call platformgetresourcebyname, which may fail and return NULL. The devmioremap function will use res-start as an...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local p...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073352)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073352 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnetdellink rmnetdellink removes the endpoi...
The vulnerability of the qusb2_phy_probe() function in the drivers/phy/qualcomm/phy-qcom-qusb2.c driver code of the Linux kernel’s PHY subsystem allows a hacker to cause a service failure.
The vulnerability of the qusb2phyprobe function in the drivers/phy/qualcomm/phy-qcom-qusb2.c file of the Linux kernel’s PHY driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Qualcomm IPA module driver drivers/net/ipa/reg/gsi_reg-v5.0.c in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the Qualcomm IPA module driver in the Linux operating system’s kernel, located at drivers/net/ipa/reg/gsireg-v5.0.c, is related to incorrect type conversion or casting. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-80746 clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix dispccmdssmdpclksrc RCG stall on Eliza EVK Eliza EVK eliza-cqs-evk.dts does not have display enabled, however its Display Clock Controller is enabled and references parent clocks from DSI PHYs, which...
The vulnerability of the ctrlcmd_bye() function in the net/qrtr/ns.c module allows a hacker to trigger a service failure for Qualcomm IPC kernel-based Linux operating systems.
The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow a attacker to cause service...
PT-2026-84944
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the Display Clock Controller is enabled on Eliza EVK despite the display being disabled. This configuration causes clock reparenting issues duri...
CVE-2024-53027-WIP
CVE-2024-53027-WIP Работа в процессе над PoC CVE-2024-53027: Уязвимость Qualcomm Bluetooth/Wi-Fi 📄 Обзор CVE-2024-53027 — это уязвимость средней степени серьёзности CVSS не оценён, затрагивающая чипсеты WLAN и Bluetooth компании Qualcomm в устройствах на Android. Она может вызывать кратковременны...
The vulnerability of the vfe_isr() function in the drivers/media/platform/qcom/camss/camss-vfe-480.c driver for multimedia devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vfeisr function in the drivers/media/platform/qcom/camss/camss-vfe-480.c driver for Linux multimedia devices is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
ROS-20260827-73-0037
The vulnerability of the qrtrendpointpost function in the net/qrtr/afqrtr.c module, which is part of the Qualcomm IPC kernel for Linux operating systems, is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the ar5523cmd() function in the drivers/net/wireless/ath/ar5523/ar5523.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ar5523cmd function in the drivers/net/wireless/ath/ar5523/ar5523.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software allows a hacker to enhance their privileges and execute arbitrary code.
The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software lies in the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to root level and execute arbitrary code...