CVE-2022-22057

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:qrb5165_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qrb5165:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qrb5165m:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qrb5165n:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:qualcomm215_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qualcomm215:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:sd439_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd439:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd460:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:qualcomm:sd480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd480:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd662:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:qualcomm:sd680_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd680:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:qualcomm:sd690_5g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd690_5g:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:qualcomm:sd695_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd695:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:qualcomm:sd750g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd750g:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:qualcomm:sd765_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd765:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:qualcomm:sd765g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd765g:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:qualcomm:sd768g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd768g:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:qualcomm:sd778g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd778g:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:qualcomm:sd780g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd780g:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:qualcomm:sd870_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd870:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:qualcomm:sd888_5g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd888_5g:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:qualcomm:sdx12_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx12:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:qualcomm:sdx55m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx55m:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:qualcomm:sdx65_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx65:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:qualcomm:sdxr2_5g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdxr2_5g:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7250p:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7315:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7325p:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND
cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*

Configuration 55 (hide)

AND
cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*

Configuration 56 (hide)

AND
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

Configuration 57 (hide)

AND
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

Configuration 60 (hide)

AND
cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:*

Configuration 61 (hide)

AND
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

Configuration 62 (hide)

AND
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*

Configuration 63 (hide)

AND
cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:*

Configuration 64 (hide)

AND
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

Configuration 65 (hide)

AND
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

Configuration 66 (hide)

AND
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

Configuration 67 (hide)

AND
cpe:2.3:o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3991:-:*:*:*:*:*:*:*

Configuration 68 (hide)

AND
cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*

Configuration 69 (hide)

AND
cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*

Configuration 70 (hide)

AND
cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*

Configuration 71 (hide)

AND
cpe:2.3:o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:*

Configuration 72 (hide)

AND
cpe:2.3:o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:*

Configuration 73 (hide)

AND
cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*

Configuration 74 (hide)

AND
cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*

Configuration 75 (hide)

AND
cpe:2.3:o:qualcomm:wcn7850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7850:-:*:*:*:*:*:*:*

Configuration 76 (hide)

AND
cpe:2.3:o:qualcomm:wcn7851_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7851:-:*:*:*:*:*:*:*

Configuration 77 (hide)

AND
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

Configuration 78 (hide)

AND
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

Configuration 79 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 80 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

History

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-416 CWE-362

12 Jun 2023, 07:16

Type Values Removed Values Added
References
  • (MISC) http://packetstormsecurity.com/files/172850/Qualcomm-kgsl-Driver-Use-After-Free.html -

Information

Published : 2022-06-14 10:15

Updated : 2024-02-28 19:09


NVD link : CVE-2022-22057

Mitre link : CVE-2022-22057

CVE.ORG link : CVE-2022-22057


JSON object : View

Products Affected

qualcomm

  • sdx65_firmware
  • qualcomm215_firmware
  • wcn3980_firmware
  • sd780g_firmware
  • sd690_5g
  • sm7325p
  • wcd9335
  • qca9377
  • sm7315
  • wcd9385_firmware
  • wsa8830_firmware
  • wcn3988
  • wcd9370_firmware
  • wcn6856
  • sdx12
  • qca8337_firmware
  • wsa8835_firmware
  • sdx12_firmware
  • sdxr2_5g_firmware
  • sd865_5g_firmware
  • sd460_firmware
  • sa6155p
  • msm8953_firmware
  • sd680_firmware
  • sd768g
  • qcs4290
  • wcn3980
  • sd460
  • sd690_5g_firmware
  • sd888_5g
  • wcn3991_firmware
  • wcn3910
  • wcd9380_firmware
  • wcn7851
  • qrb5165n_firmware
  • qca8081
  • sd662
  • sd865_5g
  • qca8337
  • wcn6855_firmware
  • wcn3950
  • sa8155p
  • sd_8_gen1_5g_firmware
  • qca8081_firmware
  • sd778g_firmware
  • qca6390_firmware
  • wcn3910_firmware
  • wsa8810_firmware
  • sd439
  • sd888
  • qca6391
  • wcn7850
  • sd768g_firmware
  • wcn6740_firmware
  • qrb5165n
  • qcs4290_firmware
  • sw5100_firmware
  • apq8053
  • wcn6851
  • wcn6855
  • wcd9341_firmware
  • sd680
  • wcn3988_firmware
  • sd765_firmware
  • qcm4290_firmware
  • sw5100p_firmware
  • wcn6740
  • ar8035
  • wcn6750_firmware
  • wcd9326
  • sd780g
  • wcn3998_firmware
  • sd888_5g_firmware
  • wcd9341
  • qrb5165m
  • qca6426_firmware
  • sw5100p
  • qcs6490
  • qcs2290_firmware
  • sd870
  • sa8195p_firmware
  • sw5100
  • wcn3615
  • wcd9380
  • wcn3950_firmware
  • wcd9370
  • qrb5165m_firmware
  • sm7325p_firmware
  • wcn3660b
  • wsa8835
  • qrb5165_firmware
  • qca6436_firmware
  • wcn7851_firmware
  • qcs2290
  • wcn3991
  • sdx55m
  • sd439_firmware
  • qca6390
  • sm7315_firmware
  • wcn7850_firmware
  • wsa8830
  • wcn6851_firmware
  • apq8053_firmware
  • sd765g_firmware
  • wcn3660b_firmware
  • wcn6850
  • wcn6856_firmware
  • qca6595au_firmware
  • qcm2290_firmware
  • sd662_firmware
  • sd480
  • sd870_firmware
  • qcs6490_firmware
  • wcn3680b_firmware
  • wsa8815
  • wsa8810
  • wcd9335_firmware
  • wcd9375
  • sdxr2_5g
  • sd750g
  • sm8475
  • sdx55m_firmware
  • sd750g_firmware
  • sd480_firmware
  • wcn6850_firmware
  • wcn3998
  • wsa8815_firmware
  • ar8035_firmware
  • qca9377_firmware
  • qcm2290
  • sd888_firmware
  • qca6174a
  • qca6426
  • sm7250p
  • wcd9375_firmware
  • wcn3615_firmware
  • sa8155p_firmware
  • sa8195p
  • qcm6490
  • qca6436
  • qca6391_firmware
  • qrb5165
  • qcm6490_firmware
  • sd778g
  • wcd9385
  • wcn3680b
  • qca6174a_firmware
  • qualcomm215
  • qcm4290
  • sd695_firmware
  • sd765
  • sd765g
  • msm8953
  • sdx65
  • wcd9326_firmware
  • sm7250p_firmware
  • qca6595au
  • sd695
  • wcn6750
  • sa6155p_firmware
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')