CVE-2022-22057: Use After Free
First published: Mon May 02 2022(Updated: )
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm APQ8053 | ||
| Qualcomm APQ8053 Firmware | ||
| Qualcomm AR8035 Firmware | ||
| Qualcomm AR8035 Firmware | ||
| Qualcomm 8953Pro Firmware | ||
| Qualcomm MSM8953 Firmware | ||
| Qualcomm QCA6174A Firmware | ||
| Qualcomm QCA6174A Firmware | ||
| Qualcomm QCA6390 Firmware | ||
| Qualcomm QCA6390 Firmware | ||
| Qualcomm QCA6391 Firmware | ||
| Qualcomm QCA6391 Firmware | ||
| Qualcomm QCA6426 Firmware | ||
| Qualcomm QCA6426 Firmware | ||
| Qualcomm QCA6436 Firmware | ||
| Qualcomm QCA6436 Firmware | ||
| Qualcomm QCA6595AU Firmware | ||
| Qualcomm QCA6595AU Firmware | ||
| Qualcomm QCA8081 firmware | ||
| Qualcomm QCA8081 firmware | ||
| Qualcomm QCA8337 Firmware | ||
| Qualcomm QCA8337 Firmware | ||
| Qualcomm QCA9377 Firmware | ||
| Qualcomm QCA9377 Firmware | ||
| Qualcomm QCM2290 | ||
| Qualcomm QCM2290 Firmware | ||
| Qualcomm QCM4290 | ||
| Qualcomm QCM4290 Firmware | ||
| Qualcomm QCM6490 | ||
| Qualcomm QCM6490 Firmware | ||
| Qualcomm QCS2290 | ||
| Qualcomm QCS2290 Firmware | ||
| Qualcomm QCS4290 Firmware | ||
| Qualcomm QCS4290 Firmware | ||
| Qualcomm QCS6490 Firmware | ||
| Qualcomm QCS6490 Firmware | ||
| Qualcomm QRB5165N Firmware | ||
| Qualcomm QRB5165 Firmware | ||
| Qualcomm QRB5165M Firmware | ||
| Qualcomm QRB5165M Firmware | ||
| Qualcomm QRB5165N Firmware | ||
| qualcomm qrb5165n firmware | ||
| Qualcomm 215 Mobile Firmware | ||
| Qualcomm 215 Firmware | ||
| Qualcomm SA6155 | ||
| Qualcomm SA6155P | ||
| Qualcomm SA8155 | ||
| Qualcomm SA8155P Firmware | ||
| Qualcomm SA8195P | ||
| Qualcomm SA8195P Firmware | ||
| Qualcomm Snapdragon 8 Gen 1 Firmware | ||
| Qualcomm SM8475P | ||
| Qualcomm SDM439 Firmware | ||
| Qualcomm Snapdragon 439 | ||
| Qualcomm SD460 Firmware | ||
| Qualcomm SD460 Firmware | ||
| Qualcomm SD 480 Firmware | ||
| Qualcomm Snapdragon 480 | ||
| Qualcomm SD662 Firmware | ||
| Qualcomm SD662 Firmware | ||
| Qualcomm SD680 Firmware | ||
| Qualcomm SD680 Firmware | ||
| Qualcomm Snapdragon 690 5G Firmware | ||
| Qualcomm Snapdragon 690 5G Firmware | ||
| Qualcomm SD695 Firmware | ||
| Qualcomm Snapdragon 695 | ||
| Qualcomm SD750G Firmware | ||
| Qualcomm Snapdragon 750G | ||
| Qualcomm SD765 Firmware | ||
| Qualcomm Snapdragon 765 | ||
| Qualcomm SD765 Firmware | ||
| Qualcomm Snapdragon 765G | ||
| Qualcomm SD768 Firmware | ||
| Qualcomm SD768G Firmware | ||
| Qualcomm SD778G Firmware | ||
| Qualcomm Snapdragon 778G | ||
| Qualcomm Snapdragon 780G Firmware | ||
| Qualcomm Snapdragon 780G | ||
| Qualcomm Snapdragon 865 5G Firmware | ||
| Qualcomm Snapdragon 865 5G Firmware | ||
| Qualcomm SD870 | ||
| Qualcomm Snapdragon 870 | ||
| Qualcomm Snapdragon 888 Firmware | ||
| Qualcomm Snapdragon 888 Firmware | ||
| Qualcomm Snapdragon 888 5G Firmware | ||
| Qualcomm Snapdragon 888 5G | ||
| Qualcomm SD 12 Firmware | ||
| Qualcomm SDX12 | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDX65 | ||
| Qualcomm SDX65M | ||
| Qualcomm SDXR2 5G Firmware | ||
| Qualcomm SDXR2 5G Firmware | ||
| Qualcomm SM7250 Firmware | ||
| Qualcomm SM7250 | ||
| Qualcomm SM7315 | ||
| Qualcomm SM7315 Firmware | ||
| Qualcomm SM7325P Firmware | ||
| Qualcomm SM7325P Firmware | ||
| Qualcomm SW5100P | ||
| Qualcomm SW5100P | ||
| Qualcomm SW5100 Firmware | ||
| Qualcomm SW5100 Firmware | ||
| Qualcomm WCD9326 | ||
| Qualcomm WCD9326 Firmware | ||
| Qualcomm WCD9335 Firmware | ||
| Qualcomm WCD9335 Firmware | ||
| Qualcomm WCD9341 | ||
| Qualcomm WCD9341 Firmware | ||
| Qualcomm WCD9370 Firmware | ||
| Qualcomm WCD9370 Firmware | ||
| Qualcomm WCD9375 | ||
| Qualcomm WCD9375 Firmware | ||
| Qualcomm WCD9380 | ||
| Qualcomm WCD9380 Firmware | ||
| Qualcomm WCD9385 | ||
| Qualcomm WCD9385 Firmware | ||
| Qualcomm WCN3615 Firmware | ||
| Qualcomm WCN3615 Firmware | ||
| Qualcomm WCN3660B | ||
| Qualcomm WCN3660B Firmware | ||
| Qualcomm WCN3680B Firmware | ||
| Qualcomm WCN3680B Firmware | ||
| Qualcomm WCN3910 Firmware | ||
| Qualcomm WCN3910 Firmware | ||
| Qualcomm WCN3950 Firmware | ||
| Qualcomm WCN3950 Firmware | ||
| Qualcomm Wcn3980 | ||
| Qualcomm WCN3980 | ||
| Qualcomm WCN3988 Firmware | ||
| Qualcomm WCN3988 Firmware | ||
| Qualcomm WCN3991 Firmware | ||
| Qualcomm WCN3991 Firmware | ||
| Qualcomm WCN3998 Firmware | ||
| Qualcomm wcn3998 firmware | ||
| Qualcomm WCN6740 Firmware | ||
| Qualcomm WCN6740 Firmware | ||
| Qualcomm WCN6750 Firmware | ||
| Qualcomm WCN6750 Firmware | ||
| Qualcomm WCN6850 Firmware | ||
| Qualcomm WCN6850 Firmware | ||
| Qualcomm WCN6851 Firmware | ||
| Qualcomm WCN6851 Firmware | ||
| Qualcomm WCN6855 Firmware | ||
| Qualcomm WCN6855 Firmware | ||
| Qualcomm WCN6856 Firmware | ||
| Qualcomm WCN6856 Firmware | ||
| Qualcomm WCN7850 Firmware | ||
| Qualcomm WCN7850 Firmware | ||
| Qualcomm WCN7851 | ||
| Qualcomm WCN7851 Firmware | ||
| Qualcomm WSA8810 | ||
| Qualcomm WSA8810 Firmware | ||
| Qualcomm WSA8815 Firmware | ||
| Qualcomm WSA8815 Firmware | ||
| Qualcomm WSA8830 | ||
| Qualcomm WSA8830 | ||
| Qualcomm WSA8835 | ||
| Qualcomm WSA8835 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/172850/Qualcomm-kgsl-Driver-Use-After-Free.html
- https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
- https://source.codeaurora.org/quic/la/kernel/msm-5.4/commit/?id=339824df70a0e9e08f2a7151b776d72421050f04
- https://source.android.com/docs/security/bulletin/2022-05-01 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2022-22057?
CVE-2022-22057 has been rated as high severity due to the potential for exploitation through a use-after-free condition.
How do I fix CVE-2022-22057?
To fix CVE-2022-22057, update the affected Qualcomm firmware or Android version as per the manufacturer's recommendations.
What products are affected by CVE-2022-22057?
CVE-2022-22057 affects various Qualcomm products including Snapdragon Auto, Snapdragon Mobile, and specific Qualcomm firmware versions.
What are the potential impacts of CVE-2022-22057?
Exploitation of CVE-2022-22057 may allow an attacker to execute arbitrary code or cause a denial of service.
Is there a workaround for CVE-2022-22057?
There is no recommended workaround for CVE-2022-22057; the best mitigation is to apply the latest firmware updates.
- agent/references
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/event
- agent/last-modified-date
- agent/source
- agent/weakness
- agent/author
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm apq8053
- canonical/qualcomm apq8053 firmware
- canonical/qualcomm ar8035 firmware
- canonical/qualcomm 8953pro firmware
- canonical/qualcomm msm8953 firmware
- canonical/qualcomm qca6174a firmware
- canonical/qualcomm qca6390 firmware
- canonical/qualcomm qca6391 firmware
- canonical/qualcomm qca6426 firmware
- canonical/qualcomm qca6436 firmware
- canonical/qualcomm qca6595au firmware
- canonical/qualcomm qca8081 firmware
- canonical/qualcomm qca8337 firmware
- canonical/qualcomm qca9377 firmware
- canonical/qualcomm qcm2290
- canonical/qualcomm qcm2290 firmware
- canonical/qualcomm qcm4290
- canonical/qualcomm qcm4290 firmware
- canonical/qualcomm qcm6490
- canonical/qualcomm qcm6490 firmware
- canonical/qualcomm qcs2290
- canonical/qualcomm qcs2290 firmware
- canonical/qualcomm qcs4290 firmware
- canonical/qualcomm qcs6490 firmware
- canonical/qualcomm qrb5165n firmware
- canonical/qualcomm qrb5165 firmware
- canonical/qualcomm qrb5165m firmware
- canonical/qualcomm 215 mobile firmware
- canonical/qualcomm 215 firmware
- canonical/qualcomm sa6155
- canonical/qualcomm sa6155p
- canonical/qualcomm sa8155
- canonical/qualcomm sa8155p firmware
- canonical/qualcomm sa8195p
- canonical/qualcomm sa8195p firmware
- canonical/qualcomm snapdragon 8 gen 1 firmware
- canonical/qualcomm sm8475p
- canonical/qualcomm sdm439 firmware
- canonical/qualcomm snapdragon 439
- canonical/qualcomm sd460 firmware
- canonical/qualcomm sd 480 firmware
- canonical/qualcomm snapdragon 480
- canonical/qualcomm sd662 firmware
- canonical/qualcomm sd680 firmware
- canonical/qualcomm snapdragon 690 5g firmware
- canonical/qualcomm sd695 firmware
- canonical/qualcomm snapdragon 695
- canonical/qualcomm sd750g firmware
- canonical/qualcomm snapdragon 750g
- canonical/qualcomm sd765 firmware
- canonical/qualcomm snapdragon 765
- canonical/qualcomm snapdragon 765g
- canonical/qualcomm sd768 firmware
- canonical/qualcomm sd768g firmware
- canonical/qualcomm sd778g firmware
- canonical/qualcomm snapdragon 778g
- canonical/qualcomm snapdragon 780g firmware
- canonical/qualcomm snapdragon 780g
- canonical/qualcomm snapdragon 865 5g firmware
- canonical/qualcomm sd870
- canonical/qualcomm snapdragon 870
- canonical/qualcomm snapdragon 888 firmware
- canonical/qualcomm snapdragon 888 5g firmware
- canonical/qualcomm snapdragon 888 5g
- canonical/qualcomm sd 12 firmware
- canonical/qualcomm sdx12
- canonical/qualcomm sdx55m firmware
- canonical/qualcomm sdx65
- canonical/qualcomm sdx65m
- canonical/qualcomm sdxr2 5g firmware
- canonical/qualcomm sm7250 firmware
- canonical/qualcomm sm7250
- canonical/qualcomm sm7315
- canonical/qualcomm sm7315 firmware
- canonical/qualcomm sm7325p firmware
- canonical/qualcomm sw5100p
- canonical/qualcomm sw5100 firmware
- canonical/qualcomm wcd9326
- canonical/qualcomm wcd9326 firmware
- canonical/qualcomm wcd9335 firmware
- canonical/qualcomm wcd9341
- canonical/qualcomm wcd9341 firmware
- canonical/qualcomm wcd9370 firmware
- canonical/qualcomm wcd9375
- canonical/qualcomm wcd9375 firmware
- canonical/qualcomm wcd9380
- canonical/qualcomm wcd9380 firmware
- canonical/qualcomm wcd9385
- canonical/qualcomm wcd9385 firmware
- canonical/qualcomm wcn3615 firmware
- canonical/qualcomm wcn3660b
- canonical/qualcomm wcn3660b firmware
- canonical/qualcomm wcn3680b firmware
- canonical/qualcomm wcn3910 firmware
- canonical/qualcomm wcn3950 firmware
- canonical/qualcomm wcn3980
- canonical/qualcomm wcn3988 firmware
- canonical/qualcomm wcn3991 firmware
- canonical/qualcomm wcn3998 firmware
- canonical/qualcomm wcn6740 firmware
- canonical/qualcomm wcn6750 firmware
- canonical/qualcomm wcn6850 firmware
- canonical/qualcomm wcn6851 firmware
- canonical/qualcomm wcn6855 firmware
- canonical/qualcomm wcn6856 firmware
- canonical/qualcomm wcn7850 firmware
- canonical/qualcomm wcn7851
- canonical/qualcomm wcn7851 firmware
- canonical/qualcomm wsa8810
- canonical/qualcomm wsa8810 firmware
- canonical/qualcomm wsa8815 firmware
- canonical/qualcomm wsa8830
- canonical/qualcomm wsa8835
- canonical/qualcomm wsa8835 firmware