CVE-2021-25370 — Samsung Mobile Devices Memory Corruption Vulnerability

Description

Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.

How to fix CVE-2021-25370

No package mapping is available — consult the references below for vendor-specific guidance.

Is CVE-2021-25370 being exploited?

Yes — CVE-2021-25370 is on the CISA Known Exploited Vulnerabilities (KEV) catalog. Patch immediately.

Affected packages (0)

No package mapping in OSV.