CVE-2021-25370

Samsung Mobile Devices

Published 26 Mar 2021 · updated 17 Jun 2026 · Analyzed

4.4 Medium · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 8 Nov 2022, with a remediation deadline of 29 Nov 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.

References