Samsung Exynos Processors Wi-Fi Driver Unbounded Memory Allocation Vulnerability Leading to Kernel Memory Exhaustion

A vulnerability exists in the Wi-Fi driver of several Samsung Mobile and Wearable Processors, including Exynos 980, 850, 1080, 1280, 2200, 1330, 1380, 1480, 1580, W920, W930, and W1000. The issue arises from unbounded memory allocation caused by a large buffer in a write operation to /proc/driver/unifi0/create_tspec. This flaw leads to exhaustion of kernel memory.

Impact

Exploitation of this vulnerability causes exhaustion of kernel memory, which can lead to a denial-of-service condition where the system becomes unresponsive or fails to allocate memory for critical processes.