Skip to content
Exploits Targeting Qualcomm Firmware and Linux Kernel Vulnerabilities

Exploits Targeting Qualcomm Firmware and Linux Kernel Vulnerabilities

First seen 25 Sep 2026, 00:54 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 26, 2026 at 00:29 UTC
  • •CVE-2025-21479 allows temporary root access on OPPO devices.
  • •A use-after-free vulnerability in the Linux kernel poses risks for Qualcomm firmware.
  • •Both exploits are currently active and require specific conditions to execute.

Recent exploits have been reported targeting vulnerabilities in Qualcomm firmware and the Linux kernel. The first exploit, related to CVE-2025-21479, affects the OPPO Find X5 Pro and allows for temporary root access through a RAM-only method. This exploit utilizes a chain of vulnerabilities to bypass OEM guards and SELinux restrictions. The second exploit involves a use-after-free vulnerability in the Linux kernel, specifically affecting Qualcomm's atoll firmware. This exploit requires specific tools and conditions to execute, including ADB access and a stable USB connection. Both exploits highlight significant security risks for devices using these systems, particularly in the context of active exploitation. Security researchers recommend immediate attention to these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 45d ago How this analysis works

Timeline

2025-06-03
CVE-2025-21479 published
CVE-2025-21479 was published, detailing a vulnerability in Qualcomm's Adreno KGSL.
Sploitus
2025-06-03
CVE-2025-21479 added to CISA KEV
CISA added CVE-2025-21479 to its Known Exploited Vulnerabilities catalog due to active exploitation.
Sploitus
2025-06-20
First public PoC for CVE-2025-21479
The first proof-of-concept code for CVE-2025-21479 was released, demonstrating the exploit.
Sploitus
2026-09-20
Exploit for Linux Kernel vulnerability published
An exploit for a use-after-free vulnerability in the Linux kernel was published, detailing its execution requirements.
Sploitus
2026-09-24
New exploit for Qualcomm firmware released
A new exploit targeting Qualcomm Aqt1000 firmware was released, allowing temporary root access.
Sploitus

More articles in this cluster (4)

Following this threat?

Track CVE-2025-21479 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (14)

1 / 3