CVE-2017-8247

In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to get_pid being called more than once, however put_pid being called only once in function "msm_close".

Score

CVSS 3.0 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2017-09-21

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Android (Google)

References

• http://www.securityfocus.com/bid/100658
• https://source.android.com/security/bulletin/2017-09-01