CVE-2017-9725: In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due...

Security readout for executives and security teams

This is a legacy Qualcomm/Android kernel issue in DMA memory allocation. A size value can be truncated because the wrong data type is used, allowing an allocation to succeed when it should fail. Business risk depends on whether deployed devices use Qualcomm CAF-based Android Linux kernels or referenced downstream packages. Most likely exposure is legacy Android or embedded devices built from Qualcomm CAF Linux kernel releases. The provided affected list is n/a, so product-level exposure requires inventory and vendor bulletin matching. Prioritize as an inventory-driven legacy risk, not an emergency based on the provided evidence. Escalate if critical managed devices still run affected Qualcomm CAF-derived kernels without vendor fixes. Mitigation focus: Check Android, Qualcomm CAF, device-vendor, and Red Hat guidance for applicable fixed builds.; Apply referenced security updates where they match deployed products.; Retire or isolate unsupported affected devices that cannot receive vendor kernel updates..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.