CVE-2025-54601

View on CVE.org
Published Apr 6, 2026 CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Description
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.

Analysis

AI-generated

Technical impact

An improper synchronization bug in the Wi‑Fi driver of Samsung Exynos mobile and wearable processors allows a race condition that results in a double free. The flaw is triggered when an ioctl function is called concurrently from multiple threads, potentially corrupting memory and leading to remote code execution or other serious consequences.

Affected Systems

Samsung’s Exynos processors, including the Mobile Processor Exynos 850, 980, 1080, 1280, 1330, 1380, 1480, 1580, and the Wearable Processor models W920, W930, and W1000. The vulnerability exists in the Wi‑Fi driver firmware bundled with these devices.

Risk and Exploitability

The CVSS score of 7 indicates moderate to high severity, but the EPSS score of less than 1% suggests a low likelihood of exploitation at present. The flaw is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector is a local application that can invoke the vulnerable ioctl concurrently; an attacker could trigger a race condition leading to memory corruption. Because of the severe impact and the low but present exploitation probability, prompt mitigation is advised.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest firmware update released by Samsung for the affected Exynos processors
  • If a patch is not yet available, disable or temporarily block the Wi‑Fi driver or limit concurrent ioctl access to the driver
  • Restrict untrusted applications from accessing the Wi‑Fi driver’s ioctl interface
  • Regularly check Samsung’s support site for updates or patches
  • Consider monitoring system logs for abnormal memory failures or driver crashes

Generated by OpenCVE AI on April 8, 2026 at 21:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Race Condition Double Free in Samsung Exynos Wi‑Fi Driver
Weaknesses CWE-416
Type Values Removed Values Added
First Time appeared Samsung exynos 1080
Samsung exynos 1080 Firmware
Samsung exynos 1280
Samsung exynos 1280 Firmware
Samsung exynos 1330
Samsung exynos 1330 Firmware
Samsung exynos 1380
Samsung exynos 1380 Firmware
Samsung exynos 1480
Samsung exynos 1480 Firmware
Samsung exynos 1580
Samsung exynos 1580 Firmware
Samsung exynos 850
Samsung exynos 850 Firmware
Samsung exynos 980
Samsung exynos 980 Firmware
Samsung exynos W1000
Samsung exynos W1000 Firmware
Samsung exynos W920
Samsung exynos W920 Firmware
Samsung exynos W930
Samsung exynos W930 Firmware
CPEs cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1330:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_1580:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_w1000:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos_w930:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_1580_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_w1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:samsung:exynos_w930_firmware:-:*:*:*:*:*:*:*
Vendors & Products Samsung exynos 1080
Samsung exynos 1080 Firmware
Samsung exynos 1280
Samsung exynos 1280 Firmware
Samsung exynos 1330
Samsung exynos 1330 Firmware
Samsung exynos 1380
Samsung exynos 1380 Firmware
Samsung exynos 1480
Samsung exynos 1480 Firmware
Samsung exynos 1580
Samsung exynos 1580 Firmware
Samsung exynos 850
Samsung exynos 850 Firmware
Samsung exynos 980
Samsung exynos 980 Firmware
Samsung exynos W1000
Samsung exynos W1000 Firmware
Samsung exynos W920
Samsung exynos W920 Firmware
Samsung exynos W930
Samsung exynos W930 Firmware
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Samsung
Samsung exynos
Vendors & Products Samsung
Samsung exynos
Type Values Removed Values Added
Title Race Condition Double Free in Samsung Exynos Wi‑Fi Driver
Weaknesses CWE-362
CWE-416
Type Values Removed Values Added
Description An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.
References
Earlier changes (1)
Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Apr 7, 2026, 2:02 PM
Reserved
Jul 27, 2025, 12:00 AM

View source JSON

Updated
Apr 7, 2026, 2:02 PM

JSON

Status
Analyzed
Published
Apr 6, 2026, 9:16 PM
Modified
Jul 24, 2026, 10:10 PM

View source JSON

No data.

Updated
Apr 9, 2026, 8:29 AM

JSON