MEDIUM · 6.2

CVE-2024-21478

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

Vulnerability Description

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

CVSS Score

6.2

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
QualcommQam8255P Firmware-
QualcommQam8255P-
QualcommQam8650P Firmware-
QualcommQam8650P-
QualcommQam8775P Firmware-
QualcommQam8775P-
QualcommQamsrv1H Firmware-
QualcommQamsrv1H-
QualcommQamsrv1M Firmware-
QualcommQamsrv1M-
QualcommSa8255P Firmware-
QualcommSa8255P-
QualcommSa8650P Firmware-
QualcommSa8650P-
QualcommSa8770P Firmware-
QualcommSa8770P-
QualcommSa8775P Firmware-
QualcommSa8775P-
QualcommSa9000P Firmware-
QualcommSa9000P-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-21478?

CVE-2024-21478 is a vulnerability with a CVSS score of 6.2 (MEDIUM). transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

How severe is CVE-2024-21478?

CVE-2024-21478 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-21478?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Qam8255P Firmware, Qualcomm Qam8255P, Qualcomm Qam8650P Firmware, Qualcomm Qam8650P, Qualcomm Qam8775P Firmware.