CVE-2014-9410
CriticalSummary
The vfe31_proc_general function in the MSM-VFE31 driver for Linux kernel 3.x does not validate a certain id value, allowing attackers to gain privileges or cause a denial of service (memory corruption) via an application making a crafted ioctl call.
Risk Assessment
This vulnerability may lead to privilege escalation or system crashes, posing a serious threat to the stability and security of devices using this driver.
Recommendation
It is recommended to update the Linux kernel to a version that includes fixes for this vulnerability and to monitor applications using ioctl calls.
Original NVD description (English source)
The vfe31_proc_general function in drivers/media/video/msm/vfe/msm_vfe31.c in the MSM-VFE31 driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate a certain id value, which allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call.