CVE-2024-38402: Use After Free in DSP Services
Memory corruption while processing IOCTL call for getting group info.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2024-11-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38402?
CVE-2024-38402 has been rated as critical due to its potential to allow memory corruption through an IOCTL call.
How do I fix CVE-2024-38402?
To fix CVE-2024-38402, it is recommended to update the affected Qualcomm firmware to the latest version as provided in vendor security bulletins.
Which devices are affected by CVE-2024-38402?
Devices using Qualcomm firmware versions affected by CVE-2024-38402 include various models like the Android OS and Qualcomm SoCs.
What kind of vulnerability is CVE-2024-38402?
CVE-2024-38402 is a memory corruption vulnerability arising from improper handling of IOCTL calls in the affected firmware.
What are the risks associated with CVE-2024-38402?
The risks of CVE-2024-38402 include potential unauthorized access and exploitation of device resources, leading to system crashes or data breaches.