6.1Medium
KEV
CVE-2021-25370Samsung Mobile Devices Memory Corruption Vulnerability
Known exploited — Samsung Mobile Devices Memory Corruption Vulnerability
CISA confirmed this vulnerability is used in real attacks on 08.11.2022. Remediation deadline for US federal agencies: 29.11.2022.
Required action: Apply updates per vendor instructions. https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370
Description
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| samsung | android | 8.0 | |
| Samsung Mobile | Samsung Mobile Devices | Selected O(8.X), P(9.0), Q(10.0), R(11.0) – < SMR Mar-2021 Release 1 |
References and patches
- https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory
- https://security.samsungmobile.com Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370 US Government Resource
CPE matches (NVD) (50)
cpe:2.3:o:samsung:android:8.0:-:*:*:*:*:*:*cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-apr-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-apr-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-aug-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-aug-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-dec-2018-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-dec-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-dec-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-feb-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-feb-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jan-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jan-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jul-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jul-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jun-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jun-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-mar-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-mar-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-may-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-may-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-nov-2018-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-nov-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-nov-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-oct-2018-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-oct-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-oct-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-sep-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-sep-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*