CVE-2021-25369: medium-severity vulnerability in Samsung Mobile Devices
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A security flaw in the sec_log file allows regular users to access sensitive kernel information that should be protected. This can help attackers understand the system's internal workings and find other vulnerabilities.
An improper access control vulnerability in the sec_log file permits unauthorized userspace access to kernel information due to inadequate permission restrictions. The vulnerability exists in versions prior to SMR MAR-2021 Release 1 and can be exploited by local users without special privileges to read protected kernel data.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.