CVE-2017-8247
HighSummary
In Qualcomm products with Android releases from CAF, there is an issue with multiple threads performing the device open operation. This may lead to get_pid being called multiple times, while put_pid is called only once.
Risk Assessment
Multiple openings of the device can lead to unpredictable system behavior and potential resource management issues. This may affect the stability and security of applications running on these devices.
Recommendation
It is recommended to monitor and limit the number of threads performing the device open operation to avoid multiple calls to get_pid. Consider updating to the latest software version if available.
Other vulnerabilities in Qualcomm products with Android releases from CAF using the Linux kernel
See all- CVE-2017-9725High
In Qualcomm products with Android releases from CAF, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
- CVE-2017-9724High
In Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory. Specifically, the ION cache maintenance code is writing to a user supplied address.
- CVE-2017-9677High
In Qualcomm products with Android releases from CAF, in function msm_compr_ioctl_shared, the variable 'ddp->params_length' could be accessed and modified by multiple threads without proper protection. This can lead to race conditions and buffer overflow if the variable is set to a large value.
- CVE-2017-8277High
In Qualcomm products with Android releases from CAF, in the function msm_dba_register_client, there is an issue where if client registration fails, the client is freed but not removed from the list. This can lead to a use-after-free situation when traversing the list next time.
- CVE-2017-8250High
In Qualcomm products with Android releases from CAF, user controlled variables 'nr_cmds' and 'nr_bos' are passed across functions without any checks. This may lead to buffer overflow when the values are too large or negative.
- CVE-2017-10999High
All Qualcomm products with Android releases from CAF using the Linux kernel may be susceptible to memory corruption. This issue occurs during concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in the ipa wan driver due to missing locks.
- CVE-2017-9679High
All Qualcomm products with Android releases from CAF using the Linux kernel may leak kernel memory contents to system logs if a userspace string is not NULL-terminated.
- CVE-2017-8262High
In Qualcomm products with Android releases from CAF, in some memory allocation and free functions, a race condition can potentially occur leading to a Use After Free condition.
- CVE-2017-8260High
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with improper type downcasting, which may lead to a value improperly passing validation and causing an out of bounds write later.
- CVE-2017-8257High
In Qualcomm products with Android releases from CAF using the Linux kernel, there is an issue with the sde_rotator debug interface. When multiple processes access this interface for register reading, one process can free the debug buffer while another process is still using it.
Original NVD description (English source)
In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to get_pid being called more than once, however put_pid being called only once in function "msm_close".