CVE-2024-33060: Use After Free in DSP Service
Memory corruption when two threads try to map and unmap a single node simultaneously.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2024-09-05 - Upgrade
Upgrade
android/platform/vendor/qcom/opensource/dsp-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33060?
The severity of CVE-2024-33060 is classified as high due to the potential for memory corruption affecting the stability of the affected systems.
How do I fix CVE-2024-33060?
To fix CVE-2024-33060, apply the latest security updates released by Qualcomm or your OEM that address this vulnerability.
Which software is affected by CVE-2024-33060?
CVE-2024-33060 affects various Qualcomm firmware used in devices, including those in Android systems.
What type of vulnerability is CVE-2024-33060?
CVE-2024-33060 is a memory corruption vulnerability that occurs when multiple threads access the same node at the same time.
Is CVE-2024-33060 being actively exploited?
As of the latest updates, there is no public information indicating that CVE-2024-33060 is being actively exploited in the wild.