CVE-2022-33303: Uncontrolled resource consumption in Linux kernel
First published: Tue Jun 06 2023(Updated: )
Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
Credit: product-security@qualcomm.com product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm Wcn685x-5 Firmware | ||
| Qualcomm Wcn685x-5 | ||
| Qualcomm Wcn685x-1 Firmware | ||
| Qualcomm Wcn685x-1 | ||
| Qualcomm Wcn785x-1 Firmware | ||
| Qualcomm Wcn785x-1 | ||
| Qualcomm Wcn785x-5 Firmware | ||
| Qualcomm Wcn785x-5 | ||
| Google Android | ||
| Qualcomm Qca6574au | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qca6696 | ||
| Google Android | ||
| Qualcomm Sa6145p | ||
| Qualcomm Sa6150p Firmware | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sa6155p | ||
| Qualcomm Sa8145p Firmware | ||
| Qualcomm Sa8145p | ||
| Google Android | ||
| Qualcomm Sa8150p | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sa8195p Firmware | ||
| Google Android | ||
| Qualcomm Sm8450 Firmware | ||
| Qualcomm Sm8450 | ||
| Qualcomm Sm8350 Firmware | ||
| Qualcomm Sm8350 | ||
| Qualcomm Sm8350-ac Firmware | ||
| Qualcomm Sm8350-ac | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Qualcomm Wcn685x-5 Firmware | ||
| Qualcomm Wcn685x-5 | ||
| All of | ||
| Qualcomm Wcn685x-1 Firmware | ||
| Qualcomm Wcn685x-1 | ||
| All of | ||
| Qualcomm Wcn785x-1 Firmware | ||
| Qualcomm Wcn785x-1 | ||
| All of | ||
| Qualcomm Wcn785x-5 Firmware | ||
| Qualcomm Wcn785x-5 | ||
| All of | ||
| Google Android | ||
| Qualcomm Qca6574au | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Qualcomm Qca6696 | ||
| All of | ||
| Google Android | ||
| Qualcomm Sa6145p | ||
| All of | ||
| Qualcomm Sa6150p Firmware | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Qualcomm Sa6155p | ||
| All of | ||
| Qualcomm Sa8145p Firmware | ||
| Qualcomm Sa8145p | ||
| All of | ||
| Google Android | ||
| Qualcomm Sa8150p | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Qualcomm Sa8195p Firmware | ||
| Google Android | ||
| All of | ||
| Qualcomm Sm8450 Firmware | ||
| Qualcomm Sm8450 | ||
| All of | ||
| Qualcomm Sm8350 Firmware | ||
| Qualcomm Sm8350 | ||
| All of | ||
| Qualcomm Sm8350-ac Firmware | ||
| Qualcomm Sm8350-ac | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android | ||
| All of | ||
| Google Android | ||
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-33303?
CVE-2022-33303 is a vulnerability in the Linux kernel that allows for transient denial-of-service attacks due to uncontrolled resource consumption when malformed messages are sent from the Gunyah Resource Manager message queue.
How severe is CVE-2022-33303?
CVE-2022-33303 has a severity level of 5.5, which is considered medium.
Which software is affected by CVE-2022-33303?
Qualcomm Wcn685x-5 Firmware, Qualcomm Wcn685x-1 Firmware, Qualcomm Wcn785x-1 Firmware, Qualcomm Wcn785x-5 Firmware, Google Android, Qualcomm Qca6574au, Qualcomm Qca6595au, Qualcomm Qca6696, Qualcomm Sa6145p, Qualcomm Sa6150p Firmware, Qualcomm Sa6155p, Qualcomm Sa8145p Firmware, Qualcomm Sa8150p, Qualcomm Sa8195p Firmware, Qualcomm Sm8450 Firmware, Qualcomm Sm8350 Firmware, Qualcomm Sm8350-ac Firmware, Qualcomm Wcd9380, Qualcomm Wcd9385, Qualcomm Wsa8830, and Qualcomm Wsa8835 are affected by CVE-2022-33303.
How do I fix CVE-2022-33303?
To fix CVE-2022-33303, it is recommended to apply the necessary updates and patches provided by Qualcomm. Please refer to the official Qualcomm product security bulletin for more information.
What is the Common Weakness Enumeration (CWE) ID of CVE-2022-33303?
The Common Weakness Enumeration (CWE) ID of CVE-2022-33303 is CWE-400.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/references
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/qualcomm
- canonical/qualcomm wcn685x-5 firmware
- canonical/qualcomm wcn685x-5
- canonical/qualcomm wcn685x-1 firmware
- canonical/qualcomm wcn685x-1
- canonical/qualcomm wcn785x-1 firmware
- canonical/qualcomm wcn785x-1
- canonical/qualcomm wcn785x-5 firmware
- canonical/qualcomm wcn785x-5
- canonical/google android
- canonical/qualcomm qca6574au
- canonical/qualcomm qca6696
- canonical/qualcomm sa6145p
- canonical/qualcomm sa6150p firmware
- canonical/qualcomm sa6155p
- canonical/qualcomm sa8145p firmware
- canonical/qualcomm sa8145p
- canonical/qualcomm sa8150p
- canonical/qualcomm sa8195p firmware
- canonical/qualcomm sm8450 firmware
- canonical/qualcomm sm8450
- canonical/qualcomm sm8350 firmware
- canonical/qualcomm sm8350
- canonical/qualcomm sm8350-ac firmware
- canonical/qualcomm sm8350-ac