VulnerabilityModified
CVE-2022-33303
Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
MEDIUM 5.5EPSS 0.10%
Does this matter?
Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own.
Description
Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.10% probability · 1th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-400
- Affected
- qualcomm/wcn685x-5 firmware · qualcomm/wcn685x-1 firmware · qualcomm/wcn785x-1 firmware · qualcomm/wcn785x-5 firmware · qualcomm/qca6574au firmware · qualcomm/qca6595au firmware · qualcomm/qca6696 firmware · qualcomm/sa6145p firmware · qualcomm/sa6150p firmware · qualcomm/sa6155p firmware · qualcomm/sa8145p firmware · qualcomm/sa8150p firmware · qualcomm/sa8155p firmware · qualcomm/sa8195p firmware · qualcomm/sm8450 firmware · qualcomm/sm8350 firmware · qualcomm/sm8350-ac firmware · qualcomm/wcd9380 firmware · qualcomm/wcd9385 firmware · qualcomm/wsa8830 firmware · +1 more
- Source
- product-security@qualcomm.com
References
- https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletinPatch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletinPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.