CVE-2020-11173: Race Condition
First published: Mon Oct 05 2020(Updated: )
u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8053, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9607, MSM8953, Nicobar, QCA6390, QCS404, QCS405, QCS610, Rennell, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM632, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm Agatti Firmware | ||
| Qualcomm Agatti | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Ipq4019 Firmware | ||
| Qualcomm Ipq4019 | ||
| Qualcomm Ipq5018 Firmware | ||
| Qualcomm Ipq5018 | ||
| Google Android | ||
| Qualcomm Ipq6018 | ||
| Qualcomm Ipq8064 Firmware | ||
| Qualcomm Ipq8064 | ||
| Qualcomm Ipq8074 Firmware | ||
| Qualcomm Ipq8074 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Mdm9607 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Nicobar | ||
| Qualcomm Qca6390 Firmware | ||
| Qualcomm Qca6390 | ||
| Qualcomm Qcs404 Firmware | ||
| Google Android | ||
| Qualcomm Qcs405 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Rennell Firmware | ||
| Google Android | ||
| Qualcomm Sa515m Firmware | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sa6155p | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sc8180x Firmware | ||
| Qualcomm Sc8180x | ||
| Qualcomm Sda845 Firmware | ||
| Qualcomm Sda845 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sdm429w Firmware | ||
| Qualcomm Sdm429w | ||
| Qualcomm Sdm632 Firmware | ||
| Qualcomm Sdm632 | ||
| Qualcomm Sdm660 Firmware | ||
| Qualcomm Sdm660 | ||
| Qualcomm Sdx55 Firmware | ||
| Qualcomm Sdx55 | ||
| Google Android | ||
| Qualcomm Sm6150 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sm8150 Firmware | ||
| Qualcomm Sm8150 | ||
| Qualcomm Sm8250 Firmware | ||
| Qualcomm SM8250 | ||
| Qualcomm Sxr2130 Firmware | ||
| Qualcomm Sxr2130 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://source.codeaurora.org/quic/la/kernel/msm-4.14/commit/?id=99d604642ea81f1596bb3734d82896da19f29ede
- https://source.android.com/docs/security/bulletin/2020-10-01 (Advisory)
- https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
- https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-11173.
What is the severity of CVE-2020-11173?
The severity of CVE-2020-11173 is high with a severity value of 7.
What is the affected software for CVE-2020-11173?
The affected software for CVE-2020-11173 includes Google Android and Qualcomm firmware.
How can a race condition be caused in the fastRPC driver?
A race condition in the fastRPC driver can be caused by two threads running simultaneously from user space.
Is there a fix available for CVE-2020-11173?
Yes, a fix for CVE-2020-11173 is available. Please refer to the vendor's security bulletin for more information.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/remedy
- agent/description
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- vendor/qualcomm
- canonical/qualcomm agatti firmware
- canonical/qualcomm agatti
- canonical/google android
- canonical/qualcomm ipq4019 firmware
- canonical/qualcomm ipq4019
- canonical/qualcomm ipq5018 firmware
- canonical/qualcomm ipq5018
- canonical/qualcomm ipq6018
- canonical/qualcomm ipq8064 firmware
- canonical/qualcomm ipq8064
- canonical/qualcomm ipq8074 firmware
- canonical/qualcomm ipq8074
- canonical/qualcomm mdm9607
- canonical/qualcomm nicobar
- canonical/qualcomm qca6390 firmware
- canonical/qualcomm qca6390
- canonical/qualcomm qcs404 firmware
- canonical/qualcomm qcs405 firmware
- canonical/qualcomm rennell firmware
- canonical/qualcomm sa515m firmware
- canonical/qualcomm sa6155p
- canonical/qualcomm sc8180x firmware
- canonical/qualcomm sc8180x
- canonical/qualcomm sda845 firmware
- canonical/qualcomm sda845
- canonical/qualcomm sdm429w firmware
- canonical/qualcomm sdm429w
- canonical/qualcomm sdm632 firmware
- canonical/qualcomm sdm632
- canonical/qualcomm sdm660 firmware
- canonical/qualcomm sdm660
- canonical/qualcomm sdx55 firmware
- canonical/qualcomm sdx55
- canonical/qualcomm sm6150
- canonical/qualcomm sm8150 firmware
- canonical/qualcomm sm8150
- canonical/qualcomm sm8250 firmware
- canonical/qualcomm sm8250
- canonical/qualcomm sxr2130 firmware
- canonical/qualcomm sxr2130
- vendor/google