CVE-2026-68985 PUBLISHED

Assigner: samsungsemiconductor
Reserved: 03.08.2026 Published: 05.11.2026 Updated: 05.11.2026

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

Product Status

Vendor Samsung Semiconductor
Product Exynos 1280
Versions Default: unaffected
  • affected from 0 to November 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 2200
Versions Default: unaffected
  • affected from 0 to November 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1380
Versions Default: unaffected
  • affected from 0 to November 2026 (excl.)

References

Problem Types

  • CWE-787 CWE