Executive brief
A Qualcomm device control handler contains a memory corruption vulnerability triggered when multiple threads simultaneously issue IOCTL requests due to improper synchronization. An attacker with local access to the device could exploit this race condition to corrupt kernel memory, potentially leading to denial of service or privilege escalation.
Technical details
The vulnerability is a race condition (CWE-362) in the device control handler's IOCTL request processing logic. The root cause is improper synchronization when multiple threads concurrently issue IOCTL requests, leading to memory corruption. The attack requires local access to trigger concurrent IOCTL calls against the device control interface. Successful exploitation could result in kernel memory corruption, enabling denial of service or potential privilege escalation. A patch is expected from Qualcomm as indicated by the September 2026 security bulletin.
Affected products
- Qualcomm <UNKNOWN> <UNKNOWN>
Timeline
- 2026-09-17: disclosed