rmgp-complete-handoff

rmgp-complete-handoff Copia de seguridad completa del espacio de trabajo + estado experimental para el exploit CVE-2026-43499 RMGP / "popsicle" dirigido a SM-A376B / Exynos S5E8845 / A376BXXU1AZB7. LeeCURRENTSTATE.md primero — es la nota autoritativa de "dónde estamos": qué funciona slide, fuga d...

CVE-2024-56426

Exynos 990 / Exynos9830 统一 BootROM 漏洞利用 针对 Exynos 990 Galaxy S20、S20 FE 和 Note20 系列的统一 CVE-2024-56426 工具。该漏洞利用接受全部十种 型号名称，并将其映射到六个已验证的出厂引导加载程序系列。 !CAUTION 跟踪的密钥包和生成的镜像具备熔断（fusing）能力。熔断是 不可逆的。熔断到某个密钥的手机只能启动与该密钥兼容的镜像。 错误的型号、回滚版本、补丁集或密钥包可能导致设备陷入熔断启动循环。 在迭代过程中请使用开发密钥和 UFS 载荷。除非明确打算进行自定义密钥熔断，...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — Samsung Exynos SMS RP-DATA 栈缓冲区溢出 针对 CVE-2025-54328 的概念性 PoC，该漏洞是三星 Exynos 基带固件 SMS RP-DATA 解析器中一个 CVSS 10.0 严重级别的基于栈的缓冲区溢出。 文章 完整文章：Samsung Exynos SMS 栈溢出：CVE-2025-54328 — 严重零点击基带 RCE PoC root@kitploit: python3 poccve202554328.py +4412345678 生成一条包含超大 TPDU 载荷的原始 RP-DATA 消息，该消息将触发...

CVE-2012-6422

Exynos 漏洞利用 这是一个针对早期三星手机中/dev/exynos-mem漏洞的概念验证（POC）文件。出于对内核漏洞研究的兴趣以及作为CTF挑战的一部分而编写。 漏洞利用 这些手机中引入的漏洞在于exynos-mem设备的权限设置。它允许用户同时拥有读写权限，即使是非 root 用户！ exynos-mem 设备允许用户直接读取/写入/dev/mem，这意味着你可以直接写入内核代码/数据。 通过利用/proc/iomem，你可以快速找出哪些物理地址对应于操作系统中的哪部分内存，甚至还能找到内核代码/数据内存的位置。 该漏洞利用通过以下步骤实现获取 root 权限： 1. 由于我们...

CVE-2024-56426

Exploit del BootROM SM-G985F / Exynos9830 !CAUTION El conjunto de claves actual y los archivos generados son capaces de realizar fusing. Una vez que un dispositivo ha sido fusionado, el cambio de eFuse es irreversible y el dispositivo debe seguir usando imágenes de arranque y material de claves q...

The vulnerability of the ccu_mix_trigger_fc() function in the drivers/clk/spacemit/ccu_mix.c module of the Linux operating system’s Samsung Exynos processor controller driver allows a attacker to cause a service failure.

The vulnerability of the ccumixtriggerfc function in the drivers/clk/spacemit/ccumix.c module of the Samsung Exynos Linux operating system processor controller driver is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: exynos-ppmu: Fixed a refcount leak in the ofgetdevfreqevents function. The ofgetchildbyname function returns a node pointer with a refcount incremented. We should use ofnodeput on this pointer after execution. This...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A race condition was detected in the Linux kernel’s DRM/Exynos device driver, specifically in the exynosdrmcrtcatomicdisable function. This can lead to a null pointer dereferencing issue, which may potentially cause a kernel panic or a denial of service condition...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: interconnect: exynos: fix node leak in probe PM QoS error path Make sure to add the newly allocated interconnect node to the provider before adding the PM QoS request, so that the node is freed in case of errors...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ARM: exynos: Fixed a refcount leak in exynosmappmu. offindmatchingnode returns a node pointer with a refcount incremented. We should use ofnodeput on it when there is no longer a need for it. Added ofnodeput to avoid the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: platform: exynos4-is: Added a hardware sync wait to fimcishwchangemode In fimcishwchangemode, the function changes camera modes without waiting for hardware completion. This can lead to corrupted data or a system hanging i...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy. For some reason, the driver that added support for the Exynos5420 MIPI phy back in 2016 was not applied to the Exynos5420 device, resulting in a kernel panic...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100546 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidiconnectionioctl,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: Use ctx-lock to protect member variables related to memory allocation/free operations. The Exynos Virtual Display driver performs memory allocation/free operations without lock protection, which can easily lead ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws The commit f316cdff8d67 annotated the hws member of the struct clkhwonecelldata with countedby. This informs the bounds sanitizer UBSANBOUNDS about the number of...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi – fixed an issue to avoid directly dereferencing the user pointer. In vidiconnectionioctl, vidi-ediduser pointer is directly dereferenced in the kernel. This allows arbitrary kernel memory access from the user...

SUSE CVE-2026-45956

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv-vididev for ctx lookup in vidiconnectionioctl vidiconnectionioctl retrieves the driverdata from drmdev-dev to obtain a struct vidicontext pointer. However, drmdev-dev is the exynos-drm master device, an...

SUSE CVE-2026-45958

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidiconnectionioctl, vidi-ediduser pointer is directly dereferenced in the kernel. This allows arbitrary kernel memory access from the user space, so instead o...

CVE-2026-45956

A flaw was found in the Linux kernel's drm/exynos component. This vulnerability arises from an incorrect lookup of device information within the vidiconnectionioctl function, where the system uses an improper pointer to access data. This can lead to memory corruption, which means the system might...

EUVD-2026-32240

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv-vididev for ctx lookup in vidiconnectionioctl vidiconnectionioctl retrieves the driverdata from drmdev-dev to obtain a struct vidicontext pointer. However, drmdev-dev is the exynos-drm master device, an...