PT-2021-7255 · Qualcomm · Qualcomm Snapdragon Industrial Iot+6

Published 2021-11-16 · Updated 2025-02-10 · CVE-2022-22057

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions (affected versions not specified) Qualcomm Snapdragon Compute versions (affected versions not specified) Qualcomm Snapdragon Connectivity versions (affected versions not specified) Qualcomm Snapdragon Industrial IOT versions (affected versions not specified) Qualcomm Snapdragon Mobile versions (affected versions not specified) Qualcomm Snapdragon Wearables versions (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the graphics fence due to a race condition while closing the fence file descriptor and destroying the graphics timeline simultaneously. This vulnerability can be exploited to execute arbitrary code. The vulnerability is associated with the Qualcomm GPU kernel driver, specifically the Kernel Graphics Support Layer (KGSL) driver.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

BDU:2022-04267

CVE-2022-22057

Affected Products

Qualcomm Gpu Kernel Driver

Qualcomm Snapdragon Auto

Qualcomm Snapdragon Compute

Qualcomm Snapdragon Connectivity

Qualcomm Snapdragon Industrial Iot

Qualcomm Snapdragon Mobile

Qualcomm Snapdragon Wearables

References · 13

• 🔥 https://github.com/diabl0w/CVE-2022-22057_SM-F926U · Exploit
• https://qualcomm.com/company/product-security/bulletins/may-2022-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22057 · Security Note
• https://bdu.fstec.ru/vul/2022-04267 · Security Note
• https://cybersecurity-help.cz/vdb/SB2022051210 · Note
• https://t.me/cybersecuritytechnologies/6255 · Telegram Post
• https://t.me/cvenotify/32005 · Telegram Post
• http://packetstormsecurity.com/files/172850/Qualcomm-kgsl-Driver-Use-After-Free.html · Note
• https://t.me/pentestingnews/24739 · Telegram Post
• https://twitter.com/javierprtd/status/1889006507402187113 · Twitter Post
• https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2022-bulletin.html · Note
• https://t.me/ckure/11496 · Telegram Post
• https://securitylab.github.com/advisories/GHSL-2022-037_msm_kernel · Note