Qualcomm Automotive Linux OS Improper Validation of Array Index Vulnerability

A memory corruption vulnerability has been identified in the kernel driver of Qualcomm's Automotive Linux OS. This issue arises from improper validation of array indices, leading to memory corruption when accessing resources within the kernel driver.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to undefined behavior in the kernel, potentially allowing for arbitrary code execution or causing a denial-of-service condition.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches with device manufacturers. Instructions for applying the patch can be found in the January 2026 Qualcomm Security Bulletin.