CVE-2024-21478: NULL Pointer Dereference in Graphics
transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom/opensource/graphics-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-08-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21478?
CVE-2024-21478 has been classified as a high severity vulnerability due to its potential to cause transient Denial of Service.
How do I fix CVE-2024-21478?
To fix CVE-2024-21478, you should apply the latest firmware updates provided by Qualcomm or your device manufacturer.
Which products are affected by CVE-2024-21478?
CVE-2024-21478 affects Google Android devices and specific Qualcomm firmware, including features in Qam8255p, Qam8650p, Qam8775p, and several others.
How does CVE-2024-21478 impact device performance?
CVE-2024-21478 can lead to a transient Denial of Service, affecting the stability and performance of the affected devices.
Is CVE-2024-21478 being actively exploited?
As of now, there is no public information indicating that CVE-2024-21478 is being actively exploited in the wild.