https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:10:19 +0000 https://cve.radiocsirt.org/vuln/cve-2023-28577 <p><strong>Affected:</strong> Qualcomm, Inc. Snapdragon, qualcomm fastconnect_6800_firmware, qualcomm fastconnect_6900_firmware, qualcomm fastconnect_7800_firmware, qualcomm qca6391_firmware, qualcomm qca6426_firmware, qualcomm qca6436_firmware, qualcomm qcn9074_firmware, qualcomm qcs410_firmware, qualcomm qcs610_firmware and 20 more</p> <p>In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.</p> <p><strong>Affected:</strong> Qualcomm, Inc. Snapdragon, qualcomm fastconnect_6800_firmware, qualcomm fastconnect_6900_firmware, qualcomm fastconnect_7800_firmware, qualcomm qca6391_firmware, qualcomm qca6426_firmware, qualcomm qca6436_firmware, qualcomm qcn9074_firmware, qualcomm qcs410_firmware, qualcomm qcs610_firmware and 20 more</p> <p>In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.</p> https://cve.radiocsirt.org/vuln/cve-2023-28577