CVE-2024-38423: Buffer Copy Without Checking Size of Input in Graphics Linux
Memory corruption while processing GPU page table switch.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2024-11-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38423?
CVE-2024-38423 has been classified with a high severity level due to potential memory corruption that can affect system stability.
How do I fix CVE-2024-38423?
To fix CVE-2024-38423, it is recommended to apply the latest firmware updates provided by Qualcomm or your device manufacturer.
What devices are affected by CVE-2024-38423?
CVE-2024-38423 affects various Qualcomm firmware including several Snapdragon and WCD platforms.
Can CVE-2024-38423 lead to unauthorized access?
Yes, CVE-2024-38423 could potentially allow unauthorized access due to memory corruption vulnerabilities.
Is there a workaround for CVE-2024-38423?
Currently, the best approach for CVE-2024-38423 is to upgrade to patched versions of the firmware, as there are no effective workarounds.