{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-54601", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-04-06T20:18:07.462Z", "dateReserved": "2025-07-27T00:00:00.000Z", "datePublished": "2026-04-06T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-06T20:18:07.462Z"}, "descriptions": [{"lang": "en", "value": "An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}, {"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54601/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}}, "dataVersion": "5.2"}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads."}], "id": "CVE-2025-54601", "lastModified": "2026-04-06T21:16:19.880", "metrics": {}, "published": "2026-04-06T21:16:19.880", "references": [{"source": "cve@mitre.org", "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}, {"source": "cve@mitre.org", "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54601/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Received"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "exynos", "vendor": "samsung"}], "analysis": {"en": {"generated_at": "2026-04-07T01:23:59.171277+00:00", "value": {"mitigation_remediation": ["Visit Samsung Semiconductor product security updates page to apply any available firmware or driver patch for the affected Exynos processors.", "Restrict concurrent ioctl usage to prevent race conditions, such as by serializing calls or limiting access to trusted processes.", "Continuously monitor Samsung Semiconductor releases or advisories for an official fix, and apply it promptly when released.", "If possible, update device firmware to the latest stable release, which may include mitigations."], "summary": {"action": "Assess Impact", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 devices are affected by the vulnerable Wi\u2011Fi driver implementation.", "description_and_impact": "An improper synchronization on a global variable in the Wi\u2011Fi driver for several Samsung Exynos processors allows a double free when an ioctl function is invoked concurrently from multiple threads. The double free can corrupt kernel or driver memory, potentially enabling arbitrary code execution or service disruption. The flaw is a classic Use\u2011After\u2011Free condition (CWE\u2011416) amplified by a race condition (CWE\u2011362).", "risk_and_exploitability": "The vulnerability exhibits high exploitability in a local or privileged context, requiring the ability to invoke ioctl on the affected driver from multiple threads. No public CVSS score is listed, and the EPSS score is unavailable, but the nature of the double free suggests a severe risk that could be leveraged for remote code execution if device firmware or applications can be crafted to trigger the race. The flaw is not currently listed in the CISA KEV catalog, indicating that known exploits are not yet publicly documented."}}}}, "created": "2026-04-07T07:16:09.939440+00:00", "title": "Race Condition Double Free in Samsung Exynos Wi\u2011Fi Driver", "updated": "2026-04-07T09:39:38.222403+00:00", "vendors": ["samsung", "samsung$PRODUCT$exynos"], "weaknesses": ["CWE-416", "CWE-362"]}