CVE-2021-30343

Improper integrity check can lead to race condition between tasks PDCP and RRC?

Critical · published June 14, 2022

CVSS v3.1
9.1
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

🚨 A sneaky race condition lurks in Snapdragon systems, where an integrity check failure could allow chaos between tasks! 🔥 Think of it like two chefs in a busy kitchen trying to grab the same ingredient from the pantry at the exact same moment — if neither checks for the other's actions, they might both mess up the recipe. In this case, the integrity check is the chef that forgot to call out, "I’m taking the salt!" An attacker could exploit this race condition to manipulate the PDCP and RRC tasks, potentially leading to unauthorized access or manipulation of critical communications. This could disrupt mobile connectivity or even compromise sensitive data, causing an absolute nightmare for users!

Put simply

Think of it like two chefs in a busy kitchen trying to grab the same ingredient from the pantry at the exact same moment — if neither checks for the other's actions, they might both mess up the recipe. In this case, the integrity check is the chef that forgot to call out, "I’m taking the salt!" This vulnerability occurs due to an improper integrity check that allows a race condition between the PDCP and RRC tasks after receiving a valid RRC Command packet, impacting Snapdragon devices across multiple sectors.

What to do

An attacker could exploit this race condition to manipulate the PDCP and RRC tasks, potentially leading to unauthorized access or manipulation of critical communications. This could disrupt mobile connectivity or even compromise sensitive data, causing an absolute nightmare for users! To safeguard against this vulnerability, manufacturers should patch their Snapdragon systems immediately. Ensure that the integrity checks are correctly implemented and validated to prevent race conditions from occurring. Regular security audits of these systems will also help mitigate future risks. You've got this! Implement the fixes and keep your systems running smoothly and securely. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00497 · 41.7th percentile
Published
2022-06-14T10:11Z
EPSS history
Timeline
  • 14 JUN 10:11Z
    Improper integrity check can lead to race condition between tasks PDCP and RRC?
    cvelistv5