CVE-2017-10997
HighSummary
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability that allows writing to a PCIe register via a debugfs node, potentially leading to kernel memory corruption.
Risk Assessment
Kernel memory corruption can lead to system instability and potential takeover of the device by an attacker.
Recommendation
It is recommended to restrict access to debugfs nodes and update the system to the latest version to minimize risk.
Other vulnerabilities in Produkty Qualcomm z Androidem korzystające z jądra Linux
See all- CVE-2017-8263High
All Qualcomm products with Android releases from CAF using the Linux kernel may experience a kernel fault when performing certain operations on a read-only virtual address in userspace.
- CVE-2016-10382Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have insufficient access control to the I2C bus.
- CVE-2015-8592Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with a pointer not being validated prior to being dereferenced, potentially leading to Guest-OS memory corruption.
Original NVD description (English source)
In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory.