CVE-2025-59600: High Severity Vulnerability in Qualcomm Linux Kernel and Graphics Kernel Packages
Summary
CVE-2025-59600: ... Affects :linux_kernel:Qualcomm versions >= SoCVersion:0, < SoCVersion:2026-03-05. Fixed in SoCVersion:2026-03-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Qualcomm Linux Kernel and Graphics Kernel packages are integral components of the Android operating system, providing essential functionalities for device hardware interaction and graphics processing. These packages are widely used in various Android devices, ensuring optimal performance and user experience. However, they are susceptible to vulnerabilities that can compromise device security and stability.
Vulnerability Detail
CVE-2025-59600 is a high-severity vulnerability affecting the Qualcomm Linux Kernel and Graphics Kernel packages. This vulnerability originates from improper handling of performance counters in the GPU drivers, which could allow an attacker to execute arbitrary code or cause a denial of service. The ramifications of this vulnerability are significant, as it could lead to unauthorized access to sensitive data or complete system compromise. The vulnerability is present in versions prior to SoCVersion:2026-03-05.
How To Fix
Minimum fixed version
SoCVersion:2026-03-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected components or disable certain features that utilize the performance counters until the patch is applied. However, this is not a long-term solution and updating to the patched version is strongly recommended.
Conclusion
CVE-2025-59600 represents a significant security risk for devices utilizing the Qualcomm Linux Kernel and Graphics Kernel packages. Users are strongly advised to update to the patched versions to mitigate potential threats and ensure device security.
See every vulnerability recorded for :linux_kernel:Qualcomm →
FAQ
CVE-2025-59600 is a high-severity vulnerability in the Qualcomm Linux Kernel and Graphics Kernel packages that can lead to arbitrary code execution or denial of service.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application using the Vulert playground at Vulert Scanner without any signup.
The vulnerability can lead to unauthorized access to sensitive data, system instability, or complete compromise of the device.
To apply the patch, update your Qualcomm Linux Kernel and Graphics Kernel packages to the versions available as of SoCVersion:2026-03-05 by following the provided commit links.
Yes, temporarily limiting access to the affected components or disabling certain features can serve as a workaround until the patch is applied.
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:Qualcomm.
