CVE-2025-54602

HighCVSS 7.0

Published: 06/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

A synchronization issue in the Wi-Fi driver of Samsung Exynos processors leads to a use-after-free vulnerability. An attacker can trigger a race condition by concurrently invoking the ioctl function from multiple threads.

Risk Assessment

The risk involves potential remote code execution or system crash by a local attacker, which could lead to device compromise.

Recommendation

Immediately update the Wi-Fi driver to the latest version provided by Samsung and restrict access to the ioctl function for unauthorized processes.

Other vulnerabilities in Samsung Exynos Wi-Fi driver

CVE-2025-54601High
A synchronization issue in the Wi-Fi driver of Samsung Exynos and Wearable processors leads to a double-free vulnerability. An attacker can trigger a race condition by concurrently invoking the ioctl function from multiple threads.

Original NVD description (English source)

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.