When defensive code becomes attack surface: 8 year old Samsung kernel UAF affecting Galaxy S9–S25

An 8-year-old use-after-free (UAF) vulnerability exists in the Samsung kernel affecting Galaxy S9 through S25 devices. The vulnerability arises from defensive code that unintentionally expands the attack surface. This issue has been publicly discussed in a recent blog post linked from a Reddit cybersecurity thread. No specific affected software versions or patch information are provided. There are no known exploits in the wild at this time.

• lucidbitlabs.com/blog/when-defenses-become-attack-surface/ (opens in a new tab)
• reddit.com/r/cybersecurity/comments/1uea9og/when_defensive_code_becomes_attack_surface_8_year/ (opens in a new tab)