{"id":"ASB-A-238106223","aliases":["3090325","A-238106223","CVE-2022-25724"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-11-01"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d3a79f61ced88351381a881d15c715658e9066c7"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/-/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8"}],"affected":[{"package":{"name":":linux_kernel:Qualcomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2022-11-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"fixes":["https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d3a79f61ced88351381a881d15c715658e9066c7","https://git.codelinaro.org/clo/la/kernel/msm-3.18/-/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8"],"severity":"High","spl":"2022-11-05","types":["Unknown"],"vanir_signatures":[{"digest":{"line_hashes":["76258014953670609384545424051280114722","134942108721065016757925723828526244298","263695363427186878781185166463846595237","110677393581947855144596983890607244728","327853497120877705212135448483932823948","22545270493410977714775304662206201073","129003639906303648075428962644913537474","282877657253224285573575871103434121041","199617950801829464085331217255640403883"],"threshold":0.9},"id":"ASB-A-238106223-083c5a74","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"file":"drivers/gpu/msm/kgsl_mmu.h"},"deprecated":false},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/kgsl_iommu.c","function":"kgsl_iommu_addr_in_range"},"deprecated":false,"digest":{"function_hash":"324195759962529308633779568290875804235","length":364},"id":"ASB-A-238106223-193ce329","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/kgsl.c","function":"kgsl_sharedmem_find"},"deprecated":false,"digest":{"length":430,"function_hash":"136487819649241510737729527259586283684"},"id":"ASB-A-238106223-1a20dac0","signature_type":"Function"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"file":"drivers/gpu/msm/kgsl.c"},"deprecated":false,"digest":{"line_hashes":["172665824938511953820653051739030838732","228167914628120927555028164286540540728","339414647846746025651876877985234896251","4658282732909842644313551476709693527"],"threshold":0.9},"id":"ASB-A-238106223-2275f5f6","signature_type":"Line"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"file":"drivers/gpu/msm/adreno_dispatch.c"},"deprecated":false,"digest":{"line_hashes":["311744695111505419643470631578245123066","252721777136985778653015412181821645710","176685613023051797500532134430671839928","170331708074683366194630853087875556763","188686957300538096130177159005823863708"],"threshold":0.9},"id":"ASB-A-238106223-2d0334bb","signature_type":"Line"},{"target":{"file":"drivers/gpu/msm/kgsl_iommu.c"},"deprecated":false,"digest":{"line_hashes":["209494179484451888813182630446508286438","147752090591473366957451797691766250312","311109872208863201920915131249220339625","246480500314617694126501065311233157780","205981331881221405665154124482700402857","291517864250025959116236507030129916990","27688267027061823426680699137581703428","309097205393224900377156779780757826336","250683309873825840243214190971346224923","13592966474011358347294393537913542844","143625623113196594161126094868940269457","50398850400154947165955636796143860165","327041938202104955677352991943441536194","58296859916130927241462437069009724796"],"threshold":0.9},"id":"ASB-A-238106223-3a6f7088","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7"},{"id":"ASB-A-238106223-3a8dc79a","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"function":"kgsl_sharedmem_find","file":"drivers/gpu/msm/kgsl.c"},"deprecated":false,"digest":{"function_hash":"251062119822563969626770682043443786445","length":459}},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/kgsl_iommu.c"},"deprecated":false,"digest":{"line_hashes":["147752090591473366957451797691766250312","311109872208863201920915131249220339625","246480500314617694126501065311233157780","205981331881221405665154124482700402857","291517864250025959116236507030129916990","27688267027061823426680699137581703428","309097205393224900377156779780757826336","250683309873825840243214190971346224923","13592966474011358347294393537913542844","143625623113196594161126094868940269457","50398850400154947165955636796143860165","327041938202104955677352991943441536194","58296859916130927241462437069009724796"],"threshold":0.9},"id":"ASB-A-238106223-41dc00ce","signature_type":"Line","signature_version":"v1"},{"target":{"file":"drivers/gpu/msm/kgsl_iommu.c","function":"kgsl_iommu_addr_in_range"},"deprecated":false,"digest":{"function_hash":"324195759962529308633779568290875804235","length":364},"id":"ASB-A-238106223-48b4b9dd","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"file":"drivers/gpu/msm/kgsl_mmu.c","function":"nommu_gpuaddr_in_range"},"deprecated":false,"digest":{"function_hash":"239026094266208697711858093474312437791","length":96},"id":"ASB-A-238106223-4c92a7d6","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/adreno_ringbuffer.c","function":"_ringbuffer_verify_ib"},"deprecated":false,"digest":{"function_hash":"253381291412493706132279067599387501878","length":515},"id":"ASB-A-238106223-4e61f22c"},{"id":"ASB-A-238106223-5b1b6f06","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/kgsl_iommu.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["209494179484451888813182630446508286438","147752090591473366957451797691766250312","311109872208863201920915131249220339625","246480500314617694126501065311233157780","205981331881221405665154124482700402857","291517864250025959116236507030129916990","27688267027061823426680699137581703428","309097205393224900377156779780757826336","250683309873825840243214190971346224923","13592966474011358347294393537913542844","143625623113196594161126094868940269457","50398850400154947165955636796143860165","327041938202104955677352991943441536194","58296859916130927241462437069009724796"]}},{"digest":{"line_hashes":["86614049439407660843233847770693110122","172665824938511953820653051739030838732","228167914628120927555028164286540540728","339414647846746025651876877985234896251","4658282732909842644313551476709693527"],"threshold":0.9},"id":"ASB-A-238106223-5cc8af8a","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/kgsl.c"},"deprecated":false},{"id":"ASB-A-238106223-608df22b","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/kgsl_mmu.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["261836500551811435082012537075672197450","143946246556924472332884345145257732873","130097566441322535559550269217398480207","270320253006759286184724004794370660286","123891660253332644397006432302438544351","161250447752430041987801967833314853138","227838743121557544894113445271333854424","337082590905387290234841598203268518451","199617950801829464085331217255640403883"]}},{"digest":{"function_hash":"253381291412493706132279067599387501878","length":515},"id":"ASB-A-238106223-610631f6","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"file":"drivers/gpu/msm/adreno_dispatch.c","function":"_verify_ib"},"deprecated":false},{"target":{"file":"drivers/gpu/msm/adreno_ringbuffer.c"},"deprecated":false,"digest":{"line_hashes":["36235962185796826180605921514912068255","252721777136985778653015412181821645710","176685613023051797500532134430671839928","170331708074683366194630853087875556763","188686957300538096130177159005823863708"],"threshold":0.9},"id":"ASB-A-238106223-6b7e8bab","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4"},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/adreno_dispatch.c"},"deprecated":false,"digest":{"line_hashes":["188719967039488319437744172273071949153","218148647592172995664984313223832842019","171937477654374011795784515445503178418","37794827454220255935578260616577538604","258075887044261976137081776892475139982"],"threshold":0.9},"id":"ASB-A-238106223-7c576f91"},{"deprecated":false,"digest":{"function_hash":"331596841719210289987503928500867964089","length":167},"id":"ASB-A-238106223-808fb4f5","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/kgsl_mmu.c","function":"kgsl_mmu_gpuaddr_in_range"}},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/kgsl.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["28422420394450562425160656626632272992","225925906737019185165080570149754719775","133182973212129457379845824346528568502","215602197428678668709841205118836846350","115790196802268547710596313830700456235","16913136858660611833582024179723461167"]},"id":"ASB-A-238106223-81c0e0fd"},{"digest":{"threshold":0.9,"line_hashes":["281958494913766831192409831609842218056","321381459660132720965749255575794982515","158371060882801616689010093739146935346","43570118168347147657782129093675856167","184996130237989534246579420819381248343","264741219710122040772780040767479373569","74009638166954470661348621097374851236","211996931151744638419719667498246814296","50852019387988956304656893295903460332","43356564700117813341845396202539660164","147475816613514508070789630594241287424","152449842558423953118486388312933362912"]},"id":"ASB-A-238106223-84437a58","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"file":"drivers/gpu/msm/kgsl_mmu.c"},"deprecated":false},{"id":"ASB-A-238106223-8a5d82d8","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/kgsl_mmu.c","function":"nommu_gpuaddr_in_range"},"deprecated":false,"digest":{"function_hash":"239026094266208697711858093474312437791","length":96}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"function":"kgsl_mmu_gpuaddr_in_range","file":"drivers/gpu/msm/kgsl_mmu.c"},"deprecated":false,"digest":{"function_hash":"331596841719210289987503928500867964089","length":167},"id":"ASB-A-238106223-92f748c8","signature_type":"Function"},{"id":"ASB-A-238106223-9678999f","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/kgsl_mmu.c","function":"kgsl_mmu_gpuaddr_in_range"},"deprecated":false,"digest":{"function_hash":"331596841719210289987503928500867964089","length":167}},{"deprecated":false,"digest":{"length":530,"function_hash":"80113216787630404778593705852879698620"},"id":"ASB-A-238106223-b62f1639","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"function":"kgsl_sharedmem_find","file":"drivers/gpu/msm/kgsl.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/kgsl_mmu.c","function":"nommu_gpuaddr_in_range"},"deprecated":false,"digest":{"function_hash":"239026094266208697711858093474312437791","length":96},"id":"ASB-A-238106223-b7aad525"},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/adreno_hwsched.c"},"deprecated":false,"digest":{"line_hashes":["252721777136985778653015412181821645710","176685613023051797500532134430671839928","170331708074683366194630853087875556763","188686957300538096130177159005823863708"],"threshold":0.9},"id":"ASB-A-238106223-b997797d","signature_type":"Line","signature_version":"v1"},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/adreno_dispatch.c","function":"_verify_ib"},"deprecated":false,"digest":{"length":554,"function_hash":"206747352865837075576336172222139466994"},"id":"ASB-A-238106223-ba9b2181","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["76258014953670609384545424051280114722","134942108721065016757925723828526244298","263695363427186878781185166463846595237","110677393581947855144596983890607244728","327853497120877705212135448483932823948","22545270493410977714775304662206201073","129003639906303648075428962644913537474","282877657253224285573575871103434121041","199617950801829464085331217255640403883"],"threshold":0.9},"id":"ASB-A-238106223-bd2f8990","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/kgsl_mmu.h"},"deprecated":false},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/kgsl_mmu.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["63647963799693607287365348950460372658","136177124998320846806612654049885350109","43570118168347147657782129093675856167","184996130237989534246579420819381248343","264741219710122040772780040767479373569","74009638166954470661348621097374851236","246061910613984077892314928179220189911","62912272249350409975881167189665317276","226315537457715758198568668358216963569","147475816613514508070789630594241287424","152449842558423953118486388312933362912"]},"id":"ASB-A-238106223-c83becad","signature_type":"Line"},{"source":"https://git.codelinaro.org/clo/la/kernel/msm-4.14/commit/d3a79f61ced88351381a881d15c715658e9066c7","target":{"function":"kgsl_iommu_addr_in_range","file":"drivers/gpu/msm/kgsl_iommu.c"},"deprecated":false,"digest":{"length":364,"function_hash":"324195759962529308633779568290875804235"},"id":"ASB-A-238106223-cbdf69ea","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":515,"function_hash":"253381291412493706132279067599387501878"},"id":"ASB-A-238106223-d9f7840a","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-5.4/commit/ac7349dd70e6d8612c16f282b9f42e6a2d0742a8","target":{"file":"drivers/gpu/msm/adreno_hwsched.c","function":"_verify_ib"}},{"id":"ASB-A-238106223-f2c9e558","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/kernel/msm-3.18/commit/c9b3b88b767cca85fe504289edf31eb1599c21f4","target":{"file":"drivers/gpu/msm/kgsl_mmu.c"},"deprecated":false,"digest":{"line_hashes":["281958494913766831192409831609842218056","321381459660132720965749255575794982515","158371060882801616689010093739146935346","43570118168347147657782129093675856167","184996130237989534246579420819381248343","264741219710122040772780040767479373569","74009638166954470661348621097374851236","211996931151744638419719667498246814296","327446328754333951372037354638082879159","101763787507744522146263635135567608838","147475816613514508070789630594241287424","152449842558423953118486388312933362912"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-238106223.json"}}],"schema_version":"1.9.0"}