CVE-2016-2067: Critical severity android vulnerability
drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, mishandles the KGSLMEMFLAGSGPUREADONLY flag, which allows attackers to gain privileges by leveraging accidental read-write mappings, aka Qualcomm internal bug CR988993.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2067?
CVE-2016-2067 has been classified as a critical vulnerability due to its potential to allow privilege escalation.
How do I fix CVE-2016-2067?
To mitigate CVE-2016-2067, users should update their Linux kernel or Android version to the latest patch that addresses this vulnerability.
Which systems are affected by CVE-2016-2067?
CVE-2016-2067 affects the Linux kernel version 3.0 up to 3.19.8 and Android versions up to 6.0.1.
What type of vulnerability is CVE-2016-2067?
CVE-2016-2067 is a privilege escalation vulnerability in the MSM graphics driver utilized in certain Linux and Android platforms.
Who discovered CVE-2016-2067?
CVE-2016-2067 was reported as part of the security findings related to Qualcomm Innovation Center's contributions to the Android kernel.