Summary
Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.
- Vendor
- Samsung
- Product
- Mobile Devices
- Added to KEV
- Nov 8, 2022
- Remediation due
- Nov 29, 2022 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-416
- EPSS
- 0.9% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References