CVE-2022-22265

Name of the Vulnerable Software and Affected Versions Samsung Exynos NPU driver versions prior to SMR Jan-2022 Release 1

Description The issue is related to an improper check or handling of exceptional conditions in the NPU driver, which can allow an attacker to perform arbitrary memory write and code execution. This is due to a use-after-free vulnerability. The vulnerability affects kernel memory handling and can be exploited to achieve code execution.

Recommendations For Samsung Exynos NPU driver versions prior to SMR Jan-2022 Release 1: Update to a version released after SMR Jan-2022 Release 1 to resolve the issue. As a temporary workaround, consider restricting access to the NPU driver to minimize the risk of exploitation.