CVE-2025-21424: Use After Free in NPU
Memory corruption while calling the NPU driver APIs concurrently.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2025-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21424?
The severity of CVE-2025-21424 is classified as critical due to memory corruption vulnerabilities.
How do I fix CVE-2025-21424?
To fix CVE-2025-21424, apply the latest firmware updates provided by Qualcomm to address the memory corruption issues.
What systems are affected by CVE-2025-21424?
CVE-2025-21424 affects various Qualcomm modem firmware including models such as the 315 5G IoT modem and AQT1000 firmware.
What are the potential impacts of CVE-2025-21424?
The potential impacts of CVE-2025-21424 include system crashes and unauthorized access due to concurrent calls to the NPU driver APIs.
How can I check if my device is vulnerable to CVE-2025-21424?
You can check if your device is vulnerable to CVE-2025-21424 by verifying the model of your Qualcomm chipset and ensuring it is up to date with the latest firmware.