CVE-2022-40525

Information Exposure in Linux Networking Firmware

State: Published
Severity: 7.1 High
Published: Jun 6, 2023
Updated: Aug 3, 2024
Reserved: Sep 12, 2022

Description

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N	qualcomm

Weaknesses

CWE-200 Information Exposure

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	CSR8811Affected IPQ6000Affected IPQ6005Affected IPQ6010Affected IPQ6018Affected IPQ6028Affected IPQ9008Affected IPQ9574Affected QCA4024Affected QCA8072Affected QCA8075Affected QCA8081Affected QCA8082Affected QCA8084Affected QCA8085Affected QCA8386Affected QCN5021Affected QCN5022Affected QCN5052Affected QCN5121Affected QCN5122Affected QCN5152Affected QCN6023Affected QCN6024Affected QCN9000Affected and 6 more versions

Product

Versions

SnapdragonQualcomm, Inc.

CSR8811Affected
IPQ6000Affected
IPQ6005Affected
IPQ6010Affected
IPQ6018Affected
IPQ6028Affected
IPQ9008Affected
IPQ9574Affected
QCA4024Affected
QCA8072Affected
QCA8075Affected
QCA8081Affected
QCA8082Affected
QCA8084Affected
QCA8085Affected
QCA8386Affected
QCN5021Affected
QCN5022Affected
QCN5052Affected
QCN5121Affected
QCN5122Affected
QCN5152Affected
QCN6023Affected
QCN6024Affected
QCN9000Affected
and 6 more versions

References

https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.