CVE-2024-56426

SM-G985F / Exynos9830 Bootrom exploit !CAUTION The current key bundle and generated files are fusing-capable. Once a device has been fused, the eFuse change is irreversible and the device must continue to use boot images and key material that match the fused key. Using these files or flows is at...

rmgp-complete-handoff

rmgp-complete-handoff Complete workspace + experiment-state backup for the CVE-2026-43499 RMGP / "popsicle" exploit targeting SM-A376B / Exynos S5E8845 / A376BXXU1AZB7. ReadCURRENTSTATE.md first — it is the authoritative "where we are" note: what works slide, skb leak, pipe oracle, 1st KernelSnit...

CVE-2024-56426

Exynos 990 / Exynos9830 통합 BootROM 익스플로잇 Exynos 990 Galaxy S20, S20 FE 및 Note20 제품군을 위한 통합 CVE-2024-56426 도구입니다. 이 익스플로잇은 10개 모델명을 모두 수용하며, 이를 검증된 6개 스톡 부트로더 제품군에 매핑합니다. !CAUTION 추적된 키 번들 및 생성된 이미지는 퓨징fusing이 가능합니다. 퓨징은 되돌릴 수 없습니다. 특정 키에 퓨징된 휴대폰은 해당 키와 호환되는 이미지만 부팅할 수 있습니다. 잘못된 모델, 롤백 리비전, 패치 세트 ...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — Samsung Exynos SMS RP-DATA Stack Buffer Overflow Conceptual PoC for CVE-2025-54328, a CVSS 10.0 Critical stack-based buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser. Article Full write-up: Samsung Exynos SMS Stack Overflow: CVE-2025-54328 — Critical...

CVE-2012-6422

Exynos Exploit Esto es una POC para explotar la vulnerabilidad /dev/exynos-mem introducida en teléfonos Samsung anteriores. Se realizó por interés en la investigación de vulnerabilidades del kernel y como parte de un desafío CTF. El Exploit La vulnerabilidad introducida en estos teléfonos son los...

The vulnerability of the ccu_mix_trigger_fc() function in the drivers/clk/spacemit/ccu_mix.c module of the Linux operating system’s Samsung Exynos processor controller driver allows a attacker to cause a service failure.

The vulnerability of the ccumixtriggerfc function in the drivers/clk/spacemit/ccumix.c module of the Samsung Exynos Linux operating system processor controller driver is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: exynos-ppmu: Fixed a refcount leak in the ofgetdevfreqevents function. The ofgetchildbyname function returns a node pointer with a refcount incremented. We should use ofnodeput on this pointer after execution. This...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A race condition was detected in the Linux kernel’s DRM/Exynos device driver, specifically in the exynosdrmcrtcatomicdisable function. This can lead to a null pointer dereferencing issue, which may potentially cause a kernel panic or a denial of service condition...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ARM: exynos: Fixed a refcount leak in exynosmappmu. offindmatchingnode returns a node pointer with a refcount incremented. We should use ofnodeput on it when there is no longer a need for it. Added ofnodeput to avoid the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: interconnect: exynos: fix node leak in probe PM QoS error path Make sure to add the newly allocated interconnect node to the provider before adding the PM QoS request, so that the node is freed in case of errors...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARNON for device endpoint command timeouts This commit addresses a rarely observed endpoint command timeout that causes kernel panic when “paniconwarn” is enabled, and unnecessary call trace prints when...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: platform: exynos4-is: Added a hardware sync wait to fimcishwchangemode In fimcishwchangemode, the function changes camera modes without waiting for hardware completion. This can lead to corrupted data or a system hanging i...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy. For some reason, the driver that added support for the Exynos5420 MIPI phy back in 2016 was not applied to the Exynos5420 device, resulting in a kernel panic...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100546 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidiconnectionioctl,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: Use ctx-lock to protect member variables related to memory allocation/free operations. The Exynos Virtual Display driver performs memory allocation/free operations without lock protection, which can easily lead ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws The commit f316cdff8d67 annotated the hws member of the struct clkhwonecelldata with countedby. This informs the bounds sanitizer UBSANBOUNDS about the number of...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi – fixed an issue to avoid directly dereferencing the user pointer. In vidiconnectionioctl, vidi-ediduser pointer is directly dereferenced in the kernel. This allows arbitrary kernel memory access from the user...

SUSE CVE-2026-45956

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv-vididev for ctx lookup in vidiconnectionioctl vidiconnectionioctl retrieves the driverdata from drmdev-dev to obtain a struct vidicontext pointer. However, drmdev-dev is the exynos-drm master device, an...

SUSE CVE-2026-45958

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidiconnectionioctl, vidi-ediduser pointer is directly dereferenced in the kernel. This allows arbitrary kernel memory access from the user space, so instead o...

CVE-2026-45956

A flaw was found in the Linux kernel's drm/exynos component. This vulnerability arises from an incorrect lookup of device information within the vidiconnectionioctl function, where the system uses an improper pointer to access data. This can lead to memory corruption, which means the system might...