Race Condition in Goodix Touchscreen Driver for Linux Kernel 3.x
CVE-2013-6122

Currently unrated

Key Information:

Vendor
Qualcomm
Status
Quic Mobile Station Modem Kernel
Vendor
CVE Published:
12 November 2013

Summary

The Goodix gt915 touchscreen driver for the Linux kernel 3.x has a significant race condition that arises from improper synchronization when updating a global variable. This vulnerability can be exploited by local users to bypass intended access restrictions, potentially leading to memory corruption and denial of service. The driver is utilized in various Qualcomm MSM devices, placing a wide array of Android-based products at risk. Mitigation strategies should focus on updating the driver to eliminate these synchronization issues.

References

http://www.openwall.com/lists/oss-security/2013/11/08/1
mailing-listx_refsource_MLIST
https://www.codeaurora.org/projects/security-advisories/m...
x_refsource_CONFIRM
https://www.codeaurora.org/cgit/quic/la/kernel/msm-3.10/c...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.