CVE-2022-39881

The CVE-2022-39881 entry concerns Samsung Exynos modems with an improper input validation vulnerability in processing the SIB12 PDU, leading to potential out-of-bounds memory reads. Affected are Exynos modem components prior to the SMR Sep-2022 Release. The connected sources indicate a remoteabil...

A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain

Posted by Maddie Stone, Project Zero Note: The three vulnerabilities discussed in this blog were all fixed in Samsung’s March 2021 release. They were fixed as CVE-2021-25337, CVE-2021-25369, CVE-2021-25370. To ensure your Samsung device is up-to-date under settings you can check that your device ...

PT-2022-38054

Уязвимость функции imx clk scu alloc dev модуля drivers/clk/imx/clk-scu.c драйвера контроллера тактовой частоты Samsung Exynos ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-38152

Уязвимость функции tegra20 clock init модуля drivers/clk/tegra/clk-tegra20.c драйвера контроллера тактовой частоты Samsung Exynos ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-14597 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write due to a use after free in the exynos5 i2c irq function. This could lead to local escalation of privilege with System execution privileges needed. User...

GSD-2022-1004935 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004885 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.286 by commit...

GSD-2022-1004823 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.250 by commit...

GSD-2022-1004737 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.202 by commit...

GSD-2022-1004620 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...

GSD-2022-1004605 PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events

PM / devfreq: exynos-ppmu: Fix refcount leak in ofgetdevfreqevents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.129 by commit...

GSD-2022-1004455 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004441 PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events

PM / devfreq: exynos-ppmu: Fix refcount leak in ofgetdevfreqevents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...

GSD-2022-1004246 ARM: exynos: Fix refcount leak in exynos_map_pmu

ARM: exynos: Fix refcount leak in exynosmappmu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...

GSD-2022-1004229 PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events

PM / devfreq: exynos-ppmu: Fix refcount leak in ofgetdevfreqevents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...

PT-2022-32882

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 5.10.126 Description A refcount leak was discovered in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.17 through...

PT-2022-32867

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description A refcount leak was discovered in the exynos-ppmu driver. The issue was introduced in version v4.0 and is fixed in Linux Kernel version v5.10.129. Recommendations For Linux Kernel versions...

PT-2022-33085

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.17 through v4.19.249 Description A refcount leak was discovered in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.17 and is fixe...

PT-2022-32999

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 5.4.201 Description The issue is related to a refcount leak in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.17...

PT-2022-32987

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.204 Description A refcount leak was discovered in the exynos-ppmu driver. The issue was introduced in version v4.0 and is fixed in Linux Kernel version v5.4.204. The actual impact and attack plausibility of...