Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-35092: Security update for :linux_kernel:Qualcomm and related packages

CVE-2021-35092 · published 4 years ago

Summary

A security issue affects :linux_kernel:Qualcomm and platform/vendor/qcom-opensource/data-kernel (Android). The advisory does not describe the issue in detail. Update to SoCVersion:2022-05-05 or later. See the linked advisory for details.

What to do

Update google :linux_kernel:qualcomm to version SoCVersion:2022-05-05.
Update google platform/vendor/qcom-opensource/data-kernel to version SoCVersion:2022-05-05.

Affected software

Ecosystem	Vendor	Product	Affected versions
Android	google	:linux_kernel:qualcomm	>= SoCVersion:0, < SoCVersion:2022-05-05 Fix: upgrade to SoCVersion:2022-05-05
Android	google	platform/vendor/qcom-opensource/data-kernel	>= SoCVersion:0, < SoCVersion:2022-05-05 Fix: upgrade to SoCVersion:2022-05-05
–	qualcomm	apq8053_firmware	All versions `cpe:2.3:o:qualcomm:apq8053_firmware:-:::::::*`
–	qualcomm	apq8096au_firmware	All versions `cpe:2.3:o:qualcomm:apq8096au_firmware:-:::::::*`
–	qualcomm	aqt1000_firmware	All versions `cpe:2.3:o:qualcomm:aqt1000_firmware:-:::::::*`
–	qualcomm	ar8031_firmware	All versions `cpe:2.3:o:qualcomm:ar8031_firmware:-:::::::*`
–	qualcomm	ar8035_firmware	All versions `cpe:2.3:o:qualcomm:ar8035_firmware:-:::::::*`
–	qualcomm	csra6620_firmware	All versions `cpe:2.3:o:qualcomm:csra6620_firmware:-:::::::*`
–	qualcomm	csra6640_firmware	All versions `cpe:2.3:o:qualcomm:csra6640_firmware:-:::::::*`
–	qualcomm	mdm9150_firmware	All versions `cpe:2.3:o:qualcomm:mdm9150_firmware:-:::::::*`
–	qualcomm	mdm9650_firmware	All versions `cpe:2.3:o:qualcomm:mdm9650_firmware:-:::::::*`
–	qualcomm	msm8953_firmware	All versions `cpe:2.3:o:qualcomm:msm8953_firmware:-:::::::*`
–	qualcomm	qca6174a_firmware	All versions `cpe:2.3:o:qualcomm:qca6174a_firmware:-:::::::*`
–	qualcomm	qca6390_firmware	All versions `cpe:2.3:o:qualcomm:qca6390_firmware:-:::::::*`
–	qualcomm	qca6391_firmware	All versions `cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*`
–	qualcomm	qca6420_firmware	All versions `cpe:2.3:o:qualcomm:qca6420_firmware:-:::::::*`
–	qualcomm	qca6430_firmware	All versions `cpe:2.3:o:qualcomm:qca6430_firmware:-:::::::*`
–	qualcomm	qca6574a_firmware	All versions `cpe:2.3:o:qualcomm:qca6574a_firmware:-:::::::*`
–	qualcomm	qca6574au_firmware	All versions `cpe:2.3:o:qualcomm:qca6574au_firmware:-:::::::*`
–	qualcomm	qca6595au_firmware	All versions `cpe:2.3:o:qualcomm:qca6595au_firmware:-:::::::*`
–	qualcomm	qca6696_firmware	All versions `cpe:2.3:o:qualcomm:qca6696_firmware:-:::::::*`
–	qualcomm	qca8081_firmware	All versions `cpe:2.3:o:qualcomm:qca8081_firmware:-:::::::*`
–	qualcomm	qca8337_firmware	All versions `cpe:2.3:o:qualcomm:qca8337_firmware:-:::::::*`
–	qualcomm	qca9377_firmware	All versions `cpe:2.3:o:qualcomm:qca9377_firmware:-:::::::*`
–	qualcomm	qcs405_firmware	All versions `cpe:2.3:o:qualcomm:qcs405_firmware:-:::::::*`
–	qualcomm	qcs410_firmware	All versions `cpe:2.3:o:qualcomm:qcs410_firmware:-:::::::*`
–	qualcomm	qcs605_firmware	All versions `cpe:2.3:o:qualcomm:qcs605_firmware:-:::::::*`
–	qualcomm	qcs610_firmware	All versions `cpe:2.3:o:qualcomm:qcs610_firmware:-:::::::*`
–	qualcomm	qrb5165_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165_firmware:-:::::::*`
–	qualcomm	qrb5165m_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165m_firmware:-:::::::*`
–	qualcomm	qrb5165n_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165n_firmware:-:::::::*`
–	qualcomm	qualcomm215_firmware	All versions `cpe:2.3:o:qualcomm:qualcomm215_firmware:-:::::::*`
–	qualcomm	sd_8_gen1_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:::::::*`
–	qualcomm	sd460_firmware	All versions `cpe:2.3:o:qualcomm:sd460_firmware:-:::::::*`
–	qualcomm	sd480_firmware	All versions `cpe:2.3:o:qualcomm:sd480_firmware:-:::::::*`
–	qualcomm	sd662_firmware	All versions `cpe:2.3:o:qualcomm:sd662_firmware:-:::::::*`
–	qualcomm	sd680_firmware	All versions `cpe:2.3:o:qualcomm:sd680_firmware:-:::::::*`
–	qualcomm	sd690_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd690_5g_firmware:-:::::::*`
–	qualcomm	sd695_firmware	All versions `cpe:2.3:o:qualcomm:sd695_firmware:-:::::::*`
–	qualcomm	sd750g_firmware	All versions `cpe:2.3:o:qualcomm:sd750g_firmware:-:::::::*`
–	qualcomm	sd765_firmware	All versions `cpe:2.3:o:qualcomm:sd765_firmware:-:::::::*`
–	qualcomm	sd765g_firmware	All versions `cpe:2.3:o:qualcomm:sd765g_firmware:-:::::::*`
–	qualcomm	sd768g_firmware	All versions `cpe:2.3:o:qualcomm:sd768g_firmware:-:::::::*`
–	qualcomm	sd778g_firmware	All versions `cpe:2.3:o:qualcomm:sd778g_firmware:-:::::::*`
–	qualcomm	sd780g_firmware	All versions `cpe:2.3:o:qualcomm:sd780g_firmware:-:::::::*`
–	qualcomm	sd855_firmware	All versions `cpe:2.3:o:qualcomm:sd855_firmware:-:::::::*`
–	qualcomm	sd865_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd865_5g_firmware:-:::::::*`
–	qualcomm	sd870_firmware	All versions `cpe:2.3:o:qualcomm:sd870_firmware:-:::::::*`
–	qualcomm	sd888_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd888_5g_firmware:-:::::::*`
–	qualcomm	sdx12_firmware	All versions `cpe:2.3:o:qualcomm:sdx12_firmware:-:::::::*`

Showing 50 of 85. Show the rest

Ecosystem	Vendor	Product	Affected versions
–	qualcomm	sdx55_firmware	All versions `cpe:2.3:o:qualcomm:sdx55_firmware:-:::::::*`
–	qualcomm	sdx55m_firmware	All versions `cpe:2.3:o:qualcomm:sdx55m_firmware:-:::::::*`
–	qualcomm	sdx65_firmware	All versions `cpe:2.3:o:qualcomm:sdx65_firmware:-:::::::*`
–	qualcomm	sm7250p_firmware	All versions `cpe:2.3:o:qualcomm:sm7250p_firmware:-:::::::*`
–	qualcomm	sm7325p_firmware	All versions `cpe:2.3:o:qualcomm:sm7325p_firmware:-:::::::*`
–	qualcomm	wcd9326_firmware	All versions `cpe:2.3:o:qualcomm:wcd9326_firmware:-:::::::*`
–	qualcomm	wcd9335_firmware	All versions `cpe:2.3:o:qualcomm:wcd9335_firmware:-:::::::*`
–	qualcomm	wcd9341_firmware	All versions `cpe:2.3:o:qualcomm:wcd9341_firmware:-:::::::*`
–	qualcomm	wcd9360_firmware	All versions `cpe:2.3:o:qualcomm:wcd9360_firmware:-:::::::*`
–	qualcomm	wcd9370_firmware	All versions `cpe:2.3:o:qualcomm:wcd9370_firmware:-:::::::*`
–	qualcomm	wcd9375_firmware	All versions `cpe:2.3:o:qualcomm:wcd9375_firmware:-:::::::*`
–	qualcomm	wcd9380_firmware	All versions `cpe:2.3:o:qualcomm:wcd9380_firmware:-:::::::*`
–	qualcomm	wcd9385_firmware	All versions `cpe:2.3:o:qualcomm:wcd9385_firmware:-:::::::*`
–	qualcomm	wcn3615_firmware	All versions `cpe:2.3:o:qualcomm:wcn3615_firmware:-:::::::*`
–	qualcomm	wcn3660b_firmware	All versions `cpe:2.3:o:qualcomm:wcn3660b_firmware:-:::::::*`
–	qualcomm	wcn3680_firmware	All versions `cpe:2.3:o:qualcomm:wcn3680_firmware:-:::::::*`
–	qualcomm	wcn3680b_firmware	All versions `cpe:2.3:o:qualcomm:wcn3680b_firmware:-:::::::*`
–	qualcomm	wcn3950_firmware	All versions `cpe:2.3:o:qualcomm:wcn3950_firmware:-:::::::*`
–	qualcomm	wcn3980_firmware	All versions `cpe:2.3:o:qualcomm:wcn3980_firmware:-:::::::*`
–	qualcomm	wcn3988_firmware	All versions `cpe:2.3:o:qualcomm:wcn3988_firmware:-:::::::*`
–	qualcomm	wcn3990_firmware	All versions `cpe:2.3:o:qualcomm:wcn3990_firmware:-:::::::*`
–	qualcomm	wcn3991_firmware	All versions `cpe:2.3:o:qualcomm:wcn3991_firmware:-:::::::*`
–	qualcomm	wcn3998_firmware	All versions `cpe:2.3:o:qualcomm:wcn3998_firmware:-:::::::*`
–	qualcomm	wcn6740_firmware	All versions `cpe:2.3:o:qualcomm:wcn6740_firmware:-:::::::*`
–	qualcomm	wcn6750_firmware	All versions `cpe:2.3:o:qualcomm:wcn6750_firmware:-:::::::*`
–	qualcomm	wcn6850_firmware	All versions `cpe:2.3:o:qualcomm:wcn6850_firmware:-:::::::*`
–	qualcomm	wcn6851_firmware	All versions `cpe:2.3:o:qualcomm:wcn6851_firmware:-:::::::*`
–	qualcomm	wcn6855_firmware	All versions `cpe:2.3:o:qualcomm:wcn6855_firmware:-:::::::*`
–	qualcomm	wcn6856_firmware	All versions `cpe:2.3:o:qualcomm:wcn6856_firmware:-:::::::*`
–	qualcomm	wcn7850_firmware	All versions `cpe:2.3:o:qualcomm:wcn7850_firmware:-:::::::*`
–	qualcomm	wcn7851_firmware	All versions `cpe:2.3:o:qualcomm:wcn7851_firmware:-:::::::*`
–	qualcomm	wsa8810_firmware	All versions `cpe:2.3:o:qualcomm:wsa8810_firmware:-:::::::*`
–	qualcomm	wsa8815_firmware	All versions `cpe:2.3:o:qualcomm:wsa8815_firmware:-:::::::*`
–	qualcomm	wsa8830_firmware	All versions `cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::*`
–	qualcomm	wsa8835_firmware	All versions `cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::*`

Original advisory text

PUB-A-204909309

Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

References

https://source.android.com/security/bulletin/2022-05-01 Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin Patch Vendor Advisory
https://source.codeaurora.org/quic/qsdk/platform/vendor/qcom-opensource/data-ker... Patch
https://source.codeaurora.org/quic/la/kernel/msm-4.14/commit/?id=b48cdc135492939... Patch

Severity

6.7 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published1 May 2022

Updated3 Nov 2026

First seen24 Mar 2026

Sources

PUB-A-204909309 · OSV

CVE-2021-35092 · NVD

Track software like this

Free during beta