CVE-2025-54602
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
A synchronization issue in the Wi-Fi driver of Samsung Exynos processors leads to a use-after-free vulnerability. An attacker can trigger a race condition by concurrently invoking the ioctl function from multiple threads.
Risk Assessment
The risk involves potential remote code execution or system crash by a local attacker, which could lead to device compromise.
Recommendation
Immediately update the Wi-Fi driver to the latest version provided by Samsung and restrict access to the ioctl function for unauthorized processes.
Other vulnerabilities in Samsung Exynos Wi-Fi driver
See all- CVE-2026-33962Low
In the Wi-Fi module of Samsung Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930 processors, a malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage.
- CVE-2026-33960Low
In Samsung Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000 processors, a malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).
- CVE-2025-54601High
A synchronization issue in the Wi-Fi driver of Samsung Exynos and Wearable processors leads to a double-free vulnerability. An attacker can trigger a race condition by concurrently invoking the ioctl function from multiple threads.
Original NVD description (English source)
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS