---
id: "CVE-2021-25370"
kind: "vulnerability"
aliases: ["CVE-2021-25370"]
title: "samsung android: An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory\u2026"
severity: "medium"
cvss: 6.1
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Samsung Mobile Devices", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "samsung android", "fixed": [], "affected": "= 8.0", "ecosystem": "vendor"}, {"name": "samsung android", "fixed": [], "affected": "= 8.1", "ecosystem": "vendor"}, {"name": "samsung android", "fixed": [], "affected": "= 9.0", "ecosystem": "vendor"}, {"name": "samsung android", "fixed": [], "affected": "= 10.0", "ecosystem": "vendor"}, {"name": "samsung android", "fixed": [], "affected": "= 11.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["android", "exploited", "infrastructure", "mobile-devices", "samsung"]
not_affected_if: ["non-samsung-devices"]
published_at: "2021-03-26T19:15:12+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25370", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25370", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# samsung android: An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory…

Samsung mobile devices with Mali GPU have a memory corruption flaw in the DPU driver's file descriptor handling that can cause a kernel panic. It was chained with CVE-2021-25337 and CVE-2021-25369 and is listed as exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Samsung Mobile Devices affected ? fixed ?
- vendor:samsung android affected = 8.0 fixed ?
- vendor:samsung android affected = 8.1 fixed ?
- vendor:samsung android affected = 9.0 fixed ?
- vendor:samsung android affected = 10.0 fixed ?
- vendor:samsung android affected = 11.0 fixed ?

## How to check

Check the device's security patch level under Settings > About phone > Software information; unknown for which level is fixed.

## Fix

Apply the Samsung security update for affected devices per vendor instructions; the specific patched build is unknown from the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25370
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2021-25370

## From the sources

Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_