CVE-2022-39897

Vulnerability

The kernel in Samsung mobile devices prior to SMR Dec-2022 Release 1 contains an exposure of sensitive information vulnerability. The kernel address information is logged, allowing local attackers to access kernel addresses. Affected versions include all kernel versions before the December 2022 security update [1].

Exploitation

An attacker with local access to the device can read kernel logs to obtain kernel address information. No special privileges are required beyond local access; the attacker simply needs to access the log output where kernel addresses are inadvertently exposed [1].

Impact

Successful exploitation allows the attacker to obtain kernel address information, which can be used to bypass kernel address space layout randomization (KASLR) and aid in further exploitation, potentially leading to more severe attacks [1].

Mitigation

Samsung released the fix in SMR Dec-2022 Release 1. Users should update to the latest security patch to mitigate this vulnerability. No workarounds are documented in the available references [1].