CVE-2022-40540

Summary

CVECVE-2022-40540
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2023-03-10 21:15:00 UTC
Updated2024-03-25 05:15:00 UTC
DescriptionMemory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

Risk And Classification

Problem Types: CWE-120

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Hardware Qualcomm Sd888 5g - All All All
Operating System Qualcomm Sd888 5g Firmware - All All All
Hardware Qualcomm Sd 8 Gen1 5g - All All All
Operating System Qualcomm Sd 8 Gen1 5g Firmware - All All All
Hardware Qualcomm Sm8475 - All All All
Hardware Qualcomm Sw5100 - All All All
Hardware Qualcomm Sw5100p - All All All
Operating System Qualcomm Sw5100p Firmware - All All All
Operating System Qualcomm Sw5100 Firmware - All All All
Hardware Qualcomm Wcd9380 - All All All
Operating System Qualcomm Wcd9380 Firmware - All All All
Hardware Qualcomm Wcd9385 - All All All
Operating System Qualcomm Wcd9385 Firmware - All All All
Hardware Qualcomm Wcn3980 - All All All
Operating System Qualcomm Wcn3980 Firmware - All All All
Hardware Qualcomm Wcn3988 - All All All
Operating System Qualcomm Wcn3988 Firmware - All All All
Hardware Qualcomm Wcn6850 - All All All
Operating System Qualcomm Wcn6850 Firmware - All All All
Hardware Qualcomm Wcn6851 - All All All
Operating System Qualcomm Wcn6851 Firmware - All All All
Hardware Qualcomm Wcn6855 - All All All
Operating System Qualcomm Wcn6855 Firmware - All All All
Hardware Qualcomm Wcn6856 - All All All
Operating System Qualcomm Wcn6856 Firmware - All All All
Hardware Qualcomm Wcn7850 - All All All
Operating System Qualcomm Wcn7850 Firmware - All All All
Hardware Qualcomm Wcn7851 - All All All
Operating System Qualcomm Wcn7851 Firmware - All All All
Hardware Qualcomm Wsa8830 - All All All
Operating System Qualcomm Wsa8830 Firmware - All All All
Hardware Qualcomm Wsa8835 - All All All
Operating System Qualcomm Wsa8835 Firmware - All All All

References

ReferenceSourceLinkTags
bugzilla.suse.com/show_bug.cgi bugzilla.suse.com
Qualcomm Documentation MISC www.qualcomm.com
CVE-2022-40540 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security MISC security.netapp.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 610471 Google Android Devices March 2023 Security Patch Missing
  • 610484 Google Android April 2023 Security Patch Missing for Samsung
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report