Out-of-bounds Write Vulnerability in Samsung Exynos NPU Driver

CVE-2026-68985

What is CVE-2026-68985?

The Samsung Exynos NPU driver contains a vulnerability due to improper validation of user input within its ioctl handler. This flaw can result in an out-of-bounds write, leading to unexpected behavior and potentially allowing attackers to trigger a denial of service. Users are encouraged to review the latest security updates from Samsung and apply necessary patches to mitigate this risk.

References