CVE-2024-53922
Received Received - Intake

Denial of Service in Samsung Exynos Auto Kernel

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: MITRE

Description
An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the kernel.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2024-53922
EUVD
EUVD-2024-55761

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
samsung exynos_auto_8890 *
samsung exynos_auto_v7 *
samsung exynos_auto_v9 *
samsung exynos_auto_v920 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1284 The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2024-53922 is a vulnerability in Samsung Exynos Auto processors (8890, V7, V9, V920) where the buffer queue driver in the kernel lacks proper length validation. This flaw can cause a Denial of Service (DoS) by crashing the kernel.

Detection Guidance

Detecting this vulnerability requires kernel-level inspection. Use Kernel Address Sanitizer (KASAN) by recompiling the kernel with KASAN enabled, then load the buffer queue driver module and monitor for memory errors or crashes. Check kernel logs for out-of-bounds memory reads or redzone violations.

Impact Analysis

This vulnerability could allow an attacker to crash the kernel on affected Samsung Exynos Auto devices, leading to system instability or unavailability. It may require local access but could disrupt operations in automotive systems using these processors.

Compliance Impact

This vulnerability, which causes a Denial of Service (DoS) in the kernel of Samsung Exynos Auto processors, could potentially impact compliance with standards like GDPR and HIPAA by disrupting the availability of automotive systems that handle sensitive data. A DoS condition may lead to system unavailability, which could violate requirements for data accessibility and integrity in these regulations.

Mitigation Strategies

Apply official patches from Samsung if available. If no patches exist, isolate affected systems, restrict access to the buffer queue driver, and monitor for DoS conditions. Contact Samsung support for updates or mitigation guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-53922. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart