An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.
| Vendor | Product | Versions |
|---|---|---|
| Samsung | n/a | n/a |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| samsung | samsung exynos | cert_advisory | 90% |
Updated vendor to Samsung, changed severity to CRITICAL, and marked the vulnerability as actively exploited with an exploit available.
Updated vendor to Samsung, product details, severity to CRITICAL, and clarified that no exploit is available.
Initial creation
