{"id":"ASB-A-193434313","aliases":["3112398","3129138","A-193434313","CVE-2022-22075"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/device/qcom/sepolicy_vndr/-/commit/985bbf7e34489068989dfaf63a7be3f001a9067b"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/3875f91837cf0b001794645a406b2a58a509f270"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/-/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888"}],"affected":[{"package":{"name":":linux_kernel:Qualcomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-03-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"spl":"2023-03-05","types":["Unknown"],"vanir_signatures":[{"source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno.h"},"deprecated":false,"digest":{"line_hashes":["57906449043767633031511711447225979877","14757504406253225998575895439865785496","179086801625322276637193296366130118595","286288843525342087876017798593717192947","179058358266417870981464586859889126599","248768407935627115128172862598075068888","254395977721743602576725578673217018258","296694279039360389129246843402528321204","222600082099760104256534684238981920802","147204232040141768217602075779204709012","264165441091692865475243898297855993047","207897542890095862430094335376051353443","62834591565337739197675818295860317293"],"threshold":0.9},"id":"ASB-A-193434313-07332713","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-193434313-1f9c47b5","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_gen7_preempt.c","function":"gen7_preemption_post_ibsubmit"},"deprecated":false,"digest":{"function_hash":"328697739491387032349176786050666186505","length":669}},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","target":{"file":"drivers/gpu/msm/adreno_compat.c","function":"adreno_ioctl_perfcounter_read_compat"},"deprecated":false,"digest":{"length":295,"function_hash":"300597790733693981111343901641420852096"},"id":"ASB-A-193434313-1f9e854d"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","target":{"file":"drivers/gpu/msm/adreno.c"},"deprecated":false,"digest":{"line_hashes":["276141501788070656180406568778487049968","55465950507934058990737272405812656503","206895431248714126252298510681961818140","112287272374049150811274508782614868084"],"threshold":0.9},"id":"ASB-A-193434313-2447de9e","signature_type":"Line"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","target":{"file":"drivers/gpu/msm/adreno_sysfs.c","function":"adreno_sysfs_init"},"deprecated":false,"digest":{"function_hash":"255121712806138189350647201829729472044","length":176},"id":"ASB-A-193434313-277d816b","signature_type":"Function"},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_a6xx_preempt.c"},"deprecated":false,"digest":{"line_hashes":["305216444049805267917569995641475009106","20791057753288267574732657963333357088","54761362144350298480556525552335128158","246197142360462647070220732039049663667","321612677511016678951913362850570035959","3225481341982961013678593439382939191","287634964731104637434853443561138134532","149565012776194557044708136088304286802","250483345062846643152532747158690979965","219388808999912598209864976501868181002","124702336517563581508768544875886915116","207966799409052119852880977325498487848","277198270715450199460391330309160020591","10144890127416438574661743979383699252","71130279356184605982608346097566196636","56260909754451606566107618062178674820","295227412843244797467276288996423803044"],"threshold":0.9},"id":"ASB-A-193434313-41edcc7d","signature_type":"Line","signature_version":"v1"},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_perfcounter.c"},"deprecated":false,"digest":{"line_hashes":["213967537810427299185275648284661786032","157687523004428597970559688545312229526","156066412252793711906144543133520657589","254900553041020736514826153879001271688","213967537810427299185275648284661786032","157687523004428597970559688545312229526","156066412252793711906144543133520657589","254900553041020736514826153879001271688"],"threshold":0.9},"id":"ASB-A-193434313-43f61d7c","signature_type":"Line","signature_version":"v1"},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno_ringbuffer.c"},"deprecated":false,"digest":{"line_hashes":["208712696490998915943079894993704093244","331071500913509042672831909456242889207","188023838434939859070622587408376470639","82272205774740044430528086734991624264","103525125931547612804929105958869606549"],"threshold":0.9},"id":"ASB-A-193434313-5c42ac0d","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"79994951141793550786662990041002936147","length":541},"id":"ASB-A-193434313-5f615557","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno_a6xx_preempt.c","function":"a6xx_preemption_post_ibsubmit"},"deprecated":false},{"deprecated":false,"digest":{"length":431,"function_hash":"30130881346114438884593647280769050817"},"id":"ASB-A-193434313-60123836","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"function":"adreno_perfcounter_restore","file":"drivers/gpu/msm/adreno_perfcounter.c"}},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_a6xx_ringbuffer.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["327562924552270066273053230087298840655","34017462162112132795838494023434307319","204054662270481995945994632384623294748","149082283342946907565695246885921941222","106706770759445801888129451941638287287","186267792006590023695333184561882561047","81178109907943508256968622890070506233","32016920687374640766954404016556819783","29584173736325417333681711703577032810","37466078736587235025908222762977859510","27538101916529190686375961109728632986","334151559385353014821228095322874429410","337037067357341558973290896453561686753"]},"id":"ASB-A-193434313-6b73d59e"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_gen7_preempt.c","function":"gen7_preemption_init"},"deprecated":false,"digest":{"function_hash":"45025704153017705305583679305218966767","length":777},"id":"ASB-A-193434313-6bc04a03"},{"deprecated":false,"digest":{"line_hashes":["191090036011283919883850085380979222199","179669571838923631099292195064794916953","2294280946269198490146933811317565055","1782950174047678866767973288013665938","336717240895082531939949064362516073991"],"threshold":0.9},"id":"ASB-A-193434313-707c0fd0","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","target":{"file":"drivers/gpu/msm/adreno.h"}},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno_ringbuffer.c","function":"adreno_ringbuffer_addcmds"},"deprecated":false,"digest":{"length":5001,"function_hash":"214250490484737403484986379473173815025"},"id":"ASB-A-193434313-762557cb"},{"target":{"function":"adreno_probe","file":"drivers/gpu/msm/adreno.c"},"deprecated":false,"digest":{"function_hash":"21337341380817939109420297475306337504","length":2589},"id":"ASB-A-193434313-766df220","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_a6xx_preempt.c","function":"a6xx_preemption_init"},"deprecated":false,"digest":{"function_hash":"1964797227399471244242663839519432416","length":777},"id":"ASB-A-193434313-81bea787","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno_a6xx_preempt.c","function":"a6xx_preemption_init"},"deprecated":false,"digest":{"length":594,"function_hash":"237876578639134111162654075207903652138"},"id":"ASB-A-193434313-8c1c9969"},{"deprecated":false,"digest":{"function_hash":"186206514383598897079693552293064062076","length":540},"id":"ASB-A-193434313-92c96b77","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_perfcounter.c","function":"adreno_perfcounter_save"}},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","target":{"file":"drivers/gpu/msm/adreno_ioctl.c"},"deprecated":false,"digest":{"line_hashes":["25066083092472720495261449715034089429","311665122801054797538690958168768046147","235977694374000497850825481985419643330","305617303470510484049220519247781540429"],"threshold":0.9},"id":"ASB-A-193434313-937fdac0"},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_a6xx_preempt.c","function":"a6xx_preemption_pre_ibsubmit"},"deprecated":false,"digest":{"function_hash":"128175111357005425983046529578402281700","length":1251},"id":"ASB-A-193434313-97afff4e","signature_type":"Function","signature_version":"v1"},{"target":{"file":"drivers/gpu/msm/adreno_a6xx_preempt.c","function":"a6xx_preemption_pre_ibsubmit"},"deprecated":false,"digest":{"function_hash":"240283671281637665783669688936980776439","length":1363},"id":"ASB-A-193434313-985d70d4","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270"},{"deprecated":false,"digest":{"function_hash":"306821821765399192746637874940846794183","length":215},"id":"ASB-A-193434313-98ca36b0","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","target":{"file":"drivers/gpu/msm/adreno_ioctl.c","function":"adreno_ioctl_perfcounter_read"}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"function":"gen7_rb_context_switch","file":"drivers/gpu/msm/adreno_gen7_ringbuffer.c"},"deprecated":false,"digest":{"function_hash":"69482752735567964929957505571634047971","length":1901},"id":"ASB-A-193434313-a69ff48e","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["58595449000038162829233915023505123520","294702491993983573953814394810220236978","306576968856299675230257190912460681688","88766484090666949040729953835942979114","120172365199598162731287009429325448323","242572699201439129266979345881630366710","110386892488531726682956116808120606633","251431512957713391463919281430900332754"]},"id":"ASB-A-193434313-afb2d33f","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno_iommu.c"},"deprecated":false},{"id":"ASB-A-193434313-b64b4abc","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","target":{"file":"drivers/gpu/msm/adreno_compat.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["184156128398546584114761591331875172182","181898936733260750937277327508467825457","301251159207074350240259413577887616534","268510023625411019757117791950175030415"]}},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_a6xx_ringbuffer.c","function":"a6xx_rb_context_switch"},"deprecated":false,"digest":{"length":1038,"function_hash":"202774037526875161506806631990609655026"},"id":"ASB-A-193434313-bc143c69"},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","target":{"file":"drivers/gpu/msm/adreno_sysfs.c"},"deprecated":false,"digest":{"line_hashes":["47796032565239926796165606631631801657","21128856293968098136086241149407762405","179023990782088885988548644954945281514","171731979938047421205590961313927628023","271681062908756291862487564309110236198","307187182468354202251981970935492754266","141430483532451142913474058472184540789","194977158451898702572194567279391623151","193498891416800514203582500724359758344","285685023012117861350867835802720029320","5680629185511030070987018004108539151","338444567555537263151491676819909743500","13220057951101560486364382124447086978","54096899514717711570343460299779002195","306703422684893624437906844598804513868","61379657927530941144094663256233051996"],"threshold":0.9},"id":"ASB-A-193434313-c8e2be97"},{"id":"ASB-A-193434313-cb1d8e46","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno_a6xx_preempt.c"},"deprecated":false,"digest":{"line_hashes":["159687842228555544995432126511937953163","186107371375542591453551184497351510779","141429906217863170723929065912912765105","179577152177272048568238686603835250416","157521879259288011179290287656196808925","185234401615500940805406560321796014647","3225481341982961013678593439382939191","287634964731104637434853443561138134532","149565012776194557044708136088304286802","250483345062846643152532747158690979965","282172211165947743374806177525862466797","236486119701581311387728335773737157609","292569126959890756467015937610093777573","157521879259288011179290287656196808925","18337212023479140189653963223054065323","262124554370780313460464246883926347392","164420141340655936496162348867187959639","266372185742399278460789398246409677134"],"threshold":0.9}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno_perfcounter.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["199201873240483549598053421754819018512","95533016344099154142684717049579877210","231473830520707082200722001894402408097","74944062771495252355377647782545088031","254900553041020736514826153879001271688","95533016344099154142684717049579877210","231473830520707082200722001894402408097","74944062771495252355377647782545088031","254900553041020736514826153879001271688"]},"id":"ASB-A-193434313-cd24651e","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"327059555597825909414210588776490598166","length":563},"id":"ASB-A-193434313-d0f72ea7","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270","target":{"file":"drivers/gpu/msm/adreno_perfcounter.c","function":"adreno_perfcounter_save"}},{"target":{"file":"drivers/gpu/msm/adreno_gen7_ringbuffer.c"},"deprecated":false,"digest":{"line_hashes":["43791565621044442305296441304909948902","280188264552894790680834521851071839030","76868325387708246007978652279030648725","129277183955895425862113728340135190550","15276748187238559966975528964867174755","131106280331817901439869988397155448540","39971847968776431380171863157274780332","110119054555017791841108153907188649557","15934694480652515640547173962326970191","65076946767489404494936712597613738819","57221893509461796717649717608603573322","75272439292908958506742901832725000730","111941423709048772929746211679364147583","270259242352277447196050241675904497088","283957611610014679227144353152517057438","328478113696803674577209697417666197135","152967856386510964707487405851746490822"],"threshold":0.9},"id":"ASB-A-193434313-d6f58a34","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_perfcounter.c","function":"adreno_perfcounter_restore"},"deprecated":false,"digest":{"length":443,"function_hash":"143492743422302550198006848315494054128"},"id":"ASB-A-193434313-e307c48e","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["286468410659786058684873193302010473077","331195170048091703578678527688464506865","104725796847739134026902202276962010117","230446262973502412485800919977172038564","230410353676866102525497531908172158942","127155117139354218586403859927014446932","3225481341982961013678593439382939191","287634964731104637434853443561138134532","149565012776194557044708136088304286802","250483345062846643152532747158690979965","219388808999912598209864976501868181002","124702336517563581508768544875886915116","207966799409052119852880977325498487848","277198270715450199460391330309160020591","10144890127416438574661743979383699252","71130279356184605982608346097566196636","56260909754451606566107618062178674820","295227412843244797467276288996423803044"],"threshold":0.9},"id":"ASB-A-193434313-e8e1fd6b","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_gen7_preempt.c"}},{"digest":{"function_hash":"24210004603764644658782864151538012842","length":1210},"id":"ASB-A-193434313-ecb904f9","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"function":"gen7_preemption_pre_ibsubmit","file":"drivers/gpu/msm/adreno_gen7_preempt.c"},"deprecated":false},{"target":{"file":"drivers/gpu/msm/adreno_iommu.c","function":"_adreno_iommu_set_pt_v2_a6xx"},"deprecated":false,"digest":{"length":747,"function_hash":"129621770527142628007015893923312933717"},"id":"ASB-A-193434313-f7041708","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.19/commit/3875f91837cf0b001794645a406b2a58a509f270"},{"deprecated":false,"digest":{"function_hash":"185574368484635877641257919624670309169","length":573},"id":"ASB-A-193434313-fa655586","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno_a6xx_preempt.c","function":"a6xx_preemption_post_ibsubmit"}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.10/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888","target":{"file":"drivers/gpu/msm/adreno.h"},"deprecated":false,"digest":{"line_hashes":["57906449043767633031511711447225979877","14757504406253225998575895439865785496","260655476991517052743506482186366160746","203513393397058965506510442535473669202","220597670152229020426621667200521712588","191107972347113401152817989227042441372","224443016199588475001074110151231451623","180890869358359681770188998184299378036","317494416243067135565580872288724464206","147204232040141768217602075779204709012","264165441091692865475243898297855993047","207897542890095862430094335376051353443","62834591565337739197675818295860317293"],"threshold":0.9},"id":"ASB-A-193434313-fc077553","signature_type":"Line"}],"fixes":["https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/3875f91837cf0b001794645a406b2a58a509f270","https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d1b32704ababb203c05b19f4c4a5b17d2f1b76b8","https://git.codelinaro.org/clo/la/kernel/msm-5.10/-/commit/ece352ac70eb739462bfa4c9f252cdde9fde4888"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-193434313.json"}},{"package":{"name":"device/qcom/sepolicy_vndr","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-03-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"types":["Unknown"],"fixes":["https://git.codelinaro.org/clo/la/device/qcom/sepolicy_vndr/-/commit/985bbf7e34489068989dfaf63a7be3f001a9067b"],"severity":"High","spl":"2023-03-05"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-193434313.json"}}],"schema_version":"1.9.0"}