CVE-2024-49848: High Severity Vulnerability in Qualcomm Linux Kernel for Android
Summary
CVE-2024-49848: ... Affects :linux_kernel:Qualcomm versions >= SoCVersion:0, < SoCVersion:2025-04-05. Fixed in SoCVersion:2025-04-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Qualcomm Linux Kernel is a critical component of the Android operating system, providing essential functionalities for hardware interaction and system performance. It is widely used across various Android devices, enabling communication between software and hardware components. This kernel is known for its performance and efficiency, but like any software, it is susceptible to vulnerabilities that can compromise device security.
Vulnerability Detail
CVE-2024-49848 is a high-severity vulnerability identified in the Qualcomm Linux Kernel, specifically affecting the 'fastrpc_mmap_create' function within the 'adsprpc.c' driver file. This vulnerability arises from improper handling of memory mapping requests, which could allow an attacker to exploit the system, potentially leading to unauthorized access or system crashes. The vulnerability was introduced in the SoC version 0 and has been addressed in the patch released on April 5, 2025. It is crucial for users and developers to be aware of this vulnerability to mitigate risks associated with device security.
How To Fix
Minimum fixed version
SoCVersion:2025-04-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2024-49848 represents a significant security risk for devices running the Qualcomm Linux Kernel. It is imperative for users to stay informed about vulnerabilities and apply necessary updates to ensure their devices remain secure. Utilizing tools like Vulert can help in monitoring for such vulnerabilities effectively.
See every vulnerability recorded for :linux_kernel:Qualcomm →
FAQ
Devices utilizing the Qualcomm Linux Kernel in their Android operating system may be affected. This includes a wide range of smartphones and tablets.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Exploitation of this vulnerability could lead to unauthorized access, system crashes, or other malicious activities that compromise device security.
The patch for CVE-2024-49848 was released on April 5, 2025. Users should ensure their systems are updated promptly.
If you are unable to update your device, consider using security measures such as limiting app permissions and avoiding suspicious downloads until a fix can be applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:Qualcomm.
