Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-30263: Snapdragon devices may lose log data if opened twice

CVE-2021-30263 · published 5 years ago

Summary

On Snapdragon Compute, Industrial IoT, Mobile, and Voice & Music platforms, opening the on-device logging function simultaneously can cause a timing conflict that may corrupt or lose log information. This can affect system monitoring and troubleshooting. Apply the latest software updates from Qualcomm to fix the synchronization issue.

What to do

Update google :linux_kernel:qualcomm to version SoCVersion:2021-11-05.

Affected software

Ecosystem	Vendor	Product	Affected versions
Android	google	:linux_kernel:qualcomm	>= SoCVersion:0, < SoCVersion:2021-11-05 Fix: upgrade to SoCVersion:2021-11-05
–	qualcomm	aqt1000_firmware	All versions `cpe:2.3:o:qualcomm:aqt1000_firmware:-:::::::*`
–	qualcomm	ar8031_firmware	All versions `cpe:2.3:o:qualcomm:ar8031_firmware:-:::::::*`
–	qualcomm	ar8035_firmware	All versions `cpe:2.3:o:qualcomm:ar8035_firmware:-:::::::*`
–	qualcomm	csra6620_firmware	All versions `cpe:2.3:o:qualcomm:csra6620_firmware:-:::::::*`
–	qualcomm	csra6640_firmware	All versions `cpe:2.3:o:qualcomm:csra6640_firmware:-:::::::*`
–	qualcomm	qca6391_firmware	All versions `cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*`
–	qualcomm	qca6420_firmware	All versions `cpe:2.3:o:qualcomm:qca6420_firmware:-:::::::*`
–	qualcomm	qca6430_firmware	All versions `cpe:2.3:o:qualcomm:qca6430_firmware:-:::::::*`
–	qualcomm	qca8337_firmware	All versions `cpe:2.3:o:qualcomm:qca8337_firmware:-:::::::*`
–	qualcomm	qcm6125_firmware	All versions `cpe:2.3:o:qualcomm:qcm6125_firmware:-:::::::*`
–	qualcomm	qcs405_firmware	All versions `cpe:2.3:o:qualcomm:qcs405_firmware:-:::::::*`
–	qualcomm	qcs6125_firmware	All versions `cpe:2.3:o:qualcomm:qcs6125_firmware:-:::::::*`
–	qualcomm	sd_8c_firmware	All versions `cpe:2.3:o:qualcomm:sd_8c_firmware:-:::::::*`
–	qualcomm	sd_8cx_firmware	All versions `cpe:2.3:o:qualcomm:sd_8cx_firmware:-:::::::*`
–	qualcomm	sd855_firmware	All versions `cpe:2.3:o:qualcomm:sd855_firmware:-:::::::*`
–	qualcomm	sdx55_firmware	All versions `cpe:2.3:o:qualcomm:sdx55_firmware:-:::::::*`
–	qualcomm	sdx55m_firmware	All versions `cpe:2.3:o:qualcomm:sdx55m_firmware:-:::::::*`
–	qualcomm	wcd9335_firmware	All versions `cpe:2.3:o:qualcomm:wcd9335_firmware:-:::::::*`
–	qualcomm	wcd9340_firmware	All versions `cpe:2.3:o:qualcomm:wcd9340_firmware:-:::::::*`
–	qualcomm	wcd9341_firmware	All versions `cpe:2.3:o:qualcomm:wcd9341_firmware:-:::::::*`
–	qualcomm	wcd9370_firmware	All versions `cpe:2.3:o:qualcomm:wcd9370_firmware:-:::::::*`
–	qualcomm	wcn3950_firmware	All versions `cpe:2.3:o:qualcomm:wcn3950_firmware:-:::::::*`
–	qualcomm	wcn3980_firmware	All versions `cpe:2.3:o:qualcomm:wcn3980_firmware:-:::::::*`
–	qualcomm	wcn3998_firmware	All versions `cpe:2.3:o:qualcomm:wcn3998_firmware:-:::::::*`
–	qualcomm	wcn3999_firmware	All versions `cpe:2.3:o:qualcomm:wcn3999_firmware:-:::::::*`
–	qualcomm	wsa8810_firmware	All versions `cpe:2.3:o:qualcomm:wsa8810_firmware:-:::::::*`
–	qualcomm	wsa8815_firmware	All versions `cpe:2.3:o:qualcomm:wsa8815_firmware:-:::::::*`

Original advisory text

PUB-A-187084382

Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

References

https://source.android.com/security/bulletin/2021-11-01 Vendor Advisory
https://source.codeaurora.org/quic/la/kernel/msm-4.14/commit/?id=593570700ed6c01... Patch
https://www.qualcomm.com/company/product-security/bulletins/november-2021-bullet... Patch Vendor Advisory

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-416Use After Free

Timeline

Published1 Nov 2021

Updated26 Oct 2026

First seen8 Sep 2026

Sources

PUB-A-187084382 · OSV

CVE-2021-30263 · NVD

Track software like this

Free during beta