CVE-2024-53922 PUBLISHED

Assigner: mitre
Reserved: 25.11.2024 Published: 13.09.2026 Updated: 13.09.2026

An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the kernel.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS Score: 5.7

Attack Vector	Local	Scope	Unchanged
Attack Complexity	High	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	Low
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Samsung
Product	Exynos 8890 firmware
Versions	Default: unaffected Version V7 is affected Version V9 is affected Version V920 is affected

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/
https://diconium.com/de/blog/cybersecurity/hunting-bugs-in-linux-kernel-with-kasan
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-53922/

Problem Types

CWE-1284 Improper Validation of Specified Quantity in Input CWE