What is the CVSS score of CVE-2025-54601?

CVE-2025-54601 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of N A are affected by CVE-2025-54601?

CVE-2025-54601 is a local privilege escalation vulnerability in Samsung Exynos Wi-Fi drivers affecting 11 processor models used in Samsung mobile and wearable devices.

How to fix or mitigate CVE-2025-54601?

Within 24 hours: Identify all Samsung mobile devices and wearables in corporate inventory running affected Exynos processors (980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, W1000). Within 7 days: Contact Samsung Security Center and request security patch timeline; enable Samsung Knox Real-time Protection if not already active on all affected devices. Within 30 days: Deploy patched firmware versions once released by Samsung; prioritize devices with high local user access risk (developer devices, rooted/jailbroken units, or those used in environments with untrusted applications). Restrict sideloaded application installation until patches are deployed.

N A CVE-2025-54601

EUVD-2025-209249 HIGH

Race Condition (CWE-362)

2026-04-06 mitre

GHSA-q6xr-vv6x-m5gj

Information Disclosure Amd Race Condition Samsung N A

7.0

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Apr 06, 2026 - 21:00 euvd

EUVD-2025-209249

Analysis Generated

Apr 06, 2026 - 21:00 vuln.today

CVE Published

Apr 06, 2026 - 00:00 nvd

HIGH 7.0

DescriptionCVE.org

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.

AnalysisAI

Race condition in Samsung Exynos Wi-Fi drivers enables local privilege escalation to kernel execution via double-free memory corruption. Affects 11 mobile and wearable processors (Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, W1000). Local attackers with low privileges can trigger memory corruption by racing ioctl calls across threads, achieving high confidentiality, integrity, and availability impact. EPSS score of 0.02% (5th percentile) suggests minimal real-world exploitation likelihood despite CVSS 7.0 severity. No public exploit identified at time of analysis.

Technical ContextAI

This vulnerability stems from CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization) in the Wi-Fi kernel driver implementation for Samsung Exynos chipsets. The driver improperly manages concurrent access to a global variable when handling ioctl system calls, creating a time-of-check-to-time-of-use (TOCTOU) race window. When multiple threads invoke the vulnerable ioctl function simultaneously, the unsynchronized state can cause the same memory region to be freed twice (double-free condition). Double-free vulnerabilities in kernel space are particularly severe as they corrupt kernel heap metadata, potentially allowing attackers to manipulate memory allocators and achieve arbitrary code execution at ring-0 privilege level. The affected processors span Samsung's mobile (Exynos 980/1080/1280/1330/1380/1480/1580) and wearable (W920/W930/W1000) product lines, plus the cost-optimized 850 chipset, indicating widespread deployment in Android smartphones, tablets, and Galaxy Watch devices.

RemediationAI

Samsung has acknowledged the vulnerability through their semiconductor security portal and published advisory documentation at https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54601/. Device manufacturers (OEMs) using affected Exynos chipsets should monitor Samsung's security bulletin for firmware updates containing synchronized ioctl handling in the Wi-Fi driver. End users should apply security patches distributed through Android security updates as they become available from device manufacturers. Organizations managing Samsung-powered mobile fleets should prioritize patching for devices with elevated exposure to untrusted applications or physical access scenarios. No workarounds were identified in available advisories. Until patches deploy, defense-in-depth measures include restricting installation of untrusted applications via mobile device management policies and enabling Android's verified boot to detect kernel tampering attempts.